Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Log4j core library can be exploited, update to 2.22.1‑tuxcare
published 3 months ago
Summary
The Apache Log4j core library, including its API and related components, has a known security weakness that could allow attackers to run code on your systems. Updating to the TuxCare‑provided version 2.22.1‑tuxcare fixes the problem. Deploy the updated package as soon as possible to keep your applications safe.
What to do
- Update apache org.apache.logging.log4j:log4j to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-1.2-api to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-api to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-api-test to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-appserver to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-bom to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-cassandra to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-core to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-core-test to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-couchdb to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-docker to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-flume-ng to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-iostreams to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-jakarta-smtp to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-jakarta-web to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-jcl to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-jdbc-dbcp2 to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-jpa to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-jpl to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-jul to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-kubernetes to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-layout-template-json to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-mongodb3 to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-mongodb4 to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-slf4j-impl to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-slf4j2-impl to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-spring-boot to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-spring-cloud-config-client to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-taglib to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-to-jul to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-to-slf4j to version 2.22.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-web to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-cassandra to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-core to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-core-test to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-couchdb to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-docker to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-flume-ng to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-jakarta-smtp to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-jakarta-web to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-jdbc-dbcp2 to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-jpa to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-kubernetes to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-layout-template-json to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-mongodb3 to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-mongodb4 to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-slf4j-impl to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-slf4j2-impl to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-spring-boot to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-spring-cloud-config-client to version 2.22.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-web to version 2.22.1-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-1.2-api |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-api |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-api-test |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-appserver |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-bom |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-cassandra |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-core |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-core-test |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-couchdb |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-docker |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-flume-ng |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-iostreams |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-jakarta-smtp |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-jakarta-web |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-jcl |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-jdbc-dbcp2 |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-jpa |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-jpl |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-jul |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-kubernetes |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-layout-template-json |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-mongodb3 |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-mongodb4 |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-slf4j-impl |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-slf4j2-impl |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-spring-boot |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-spring-cloud-config-client |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-taglib |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-to-jul |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-to-slf4j |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-web |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-cassandra |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-core |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-core-test |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-couchdb |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-docker |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-flume-ng |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-jakarta-smtp |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-jakarta-web |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-jdbc-dbcp2 |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-jpa |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-kubernetes |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-layout-template-json |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-mongodb3 |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-mongodb4 |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-slf4j-impl |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-slf4j2-impl |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-spring-boot |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-spring-cloud-config-client |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
Showing 50 of 51. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-web |
>= 2.22.1, < 2.22.1-tuxcare.2 Fix: upgrade to 2.22.1-tuxcare.2
|
Original advisory text
TuxCare security update for org.apache.logging.log4j:log4j-core (1 CVE)
TuxCare rebuilt org.apache.logging.log4j:log4j-core to address 1 CVE. Fixed in 2.22.1-tuxcare.2.
Timeline
Published4 Aug 2026
Updated2 Nov 2026
First seen15 Oct 2026
Sources
CLSA-2026-1781052749 · OSV
Track software like this
Free during beta