[CLSA-2026:1791296887] log4j: Fix of CVE-2026-34479
Type:
security
Severity:
Important
Release date:
2026-10-06 14:28:17 UTC
Description:
- CVE-2026-34479: fix Log4j1XmlLayout invalid XML 1.0 character escape
CVEs fixed:
Updated packages:
  • log4j-2.17.2-1.el9.tuxcare.els1.noarch.rpm
    sha:7cda9b84052ad774fe4d15c00ac2081a9c00b632c1f6336f697a2f37b7408b12
  • log4j-jcl-2.17.2-1.el9.tuxcare.els1.noarch.rpm
    sha:0bf66c2e4f3d72a7088fd52d7de97a89f599ba5ca341d092074e21e7ee46afa9
  • log4j-slf4j-2.17.2-1.el9.tuxcare.els1.noarch.rpm
    sha:7ce2098a0682a27f7a0bced5256bb10433f3fc3652410b26e0cc9aa71503f9e8
  • log4j-web-2.17.2-1.el9.tuxcare.els1.noarch.rpm
    sha:caa2ad12d4e16c69bda96e4c2f462e4bd55e380d18a978ba5df7aeacf985b3bf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.