Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Apache Log4j core component updated to stop remote code execution
published 3 months ago
Summary
The Log4j logging library used in many Java applications had a serious flaw that could let attackers run code on your servers. TuxCare has released a rebuilt version of the core library that closes this gap. Update to the provided package version as soon as possible to keep your systems safe.
What to do
- Update apache org.apache.logging.log4j:log4j to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-1.2-api to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-api to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-appserver to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-bom to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-cassandra to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-core to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-couchdb to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-docker to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-flume-ng to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-iostreams to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-jakarta-web to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-jcl to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-jdbc-dbcp2 to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-jmx-gui to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-jpa to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-jpl to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-jul to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-kubernetes to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-layout-template-json to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-liquibase to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-mongodb3 to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-mongodb4 to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-osgi to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-slf4j-impl to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-slf4j18-impl to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-spring-boot to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-spring-cloud-config to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-spring-cloud-config-client to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-taglib to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-to-slf4j to version 2.17.1-tuxcare.2.
- Update apache org.apache.logging.log4j:log4j-web to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-appserver to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-cassandra to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-core to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-couchdb to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-docker to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-flume-ng to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-jakarta-web to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-jdbc-dbcp2 to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-jmx-gui to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-jpa to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-kubernetes to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-layout-template-json to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-mongodb3 to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-mongodb4 to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-slf4j-impl to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-slf4j18-impl to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-spring-boot to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-spring-cloud-config-client to version 2.17.1-tuxcare.2.
- Update org.apache.logging.log4j:log4j-web to version 2.17.1-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-1.2-api |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-api |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-appserver |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-bom |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-cassandra |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-core |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-couchdb |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-docker |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-flume-ng |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-iostreams |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-jakarta-web |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-jcl |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-jdbc-dbcp2 |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-jmx-gui |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-jpa |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-jpl |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-jul |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-kubernetes |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-layout-template-json |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-liquibase |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-mongodb3 |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-mongodb4 |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-osgi |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-slf4j-impl |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-slf4j18-impl |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-spring-boot |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-spring-cloud-config |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-spring-cloud-config-client |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-taglib |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-to-slf4j |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | apache | org.apache.logging.log4j:log4j-web |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-appserver |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-cassandra |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-core |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-couchdb |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-docker |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-flume-ng |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-jakarta-web |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-jdbc-dbcp2 |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-jmx-gui |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-jpa |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-kubernetes |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-layout-template-json |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-mongodb3 |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-mongodb4 |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-slf4j-impl |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-slf4j18-impl |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-spring-boot |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-spring-cloud-config-client |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
Showing 50 of 51. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | – | org.apache.logging.log4j:log4j-web |
>= 2.17.1, < 2.17.1-tuxcare.2 Fix: upgrade to 2.17.1-tuxcare.2
|
Original advisory text
TuxCare security update for org.apache.logging.log4j:log4j-core (1 CVE)
TuxCare rebuilt org.apache.logging.log4j:log4j-core to address 1 CVE. Fixed in 2.17.1-tuxcare.2.
Timeline
Published4 Aug 2026
Updated2 Nov 2026
First seen15 Oct 2026
Sources
CLSA-2026-1779929356 · OSV
Track software like this
Free during beta