shield Security update for log4j

SUSE-SLE-Module-Basesystem-15-SP7-2026-1843

This update for log4j fixes the following issues: - CVE-2026-34477: TLS connections vulnerable to interception due to incomplete hostname verification configuration checks (bsc#1262050). - CVE-2026-34479: silent log event loss due to improper XML escaping in `Log4j1XmlLayout` (bsc#1262091). - CVE-2026-34480: silent log event loss due to improper XML escaping in `XmlLayout` (bsc#1262092). - CVE-2026-34481: silent log event loss due to improper serialization of non-finite floating-point values in `JsonTemplateLayout` (bsc#1262093).

• Release Date
  May 13 2026
• References
  Bugzilla: 1262091, 1262092, 1262093, 1262050
  CVEs: CVE-2026-34481, CVE-2026-34480, CVE-2026-34479, CVE-2026-34477
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.7 s390x

• Packages
  log4j
  Java logging package

  2.20.0-150200.4.33.1 lock rpm lock src

  log4j-javadoc
  API documentation for log4j

  2.20.0-150200.4.33.1 lock rpm

  log4j-jcl
  Apache Log4j Commons Logging Bridge

  2.20.0-150200.4.33.1 lock rpm

  log4j-slf4j
  Binding between LOG4J 2 API and SLF4J

  2.20.0-150200.4.33.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  log4j
  Java logging package

  2.20.0-150200.4.33.1 lock rpm lock src

  log4j-javadoc
  API documentation for log4j

  2.20.0-150200.4.33.1 lock rpm

  log4j-jcl
  Apache Log4j Commons Logging Bridge

  2.20.0-150200.4.33.1 lock rpm

  log4j-slf4j
  Binding between LOG4J 2 API and SLF4J

  2.20.0-150200.4.33.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  log4j
  Java logging package

  2.20.0-150200.4.33.1 lock rpm lock src

  log4j-javadoc
  API documentation for log4j

  2.20.0-150200.4.33.1 lock rpm

  log4j-jcl
  Apache Log4j Commons Logging Bridge

  2.20.0-150200.4.33.1 lock rpm

  log4j-slf4j
  Binding between LOG4J 2 API and SLF4J

  2.20.0-150200.4.33.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  log4j
  Java logging package

  2.20.0-150200.4.33.1 lock rpm lock src

  log4j-javadoc
  API documentation for log4j

  2.20.0-150200.4.33.1 lock rpm

  log4j-jcl
  Apache Log4j Commons Logging Bridge

  2.20.0-150200.4.33.1 lock rpm

  log4j-slf4j
  Binding between LOG4J 2 API and SLF4J

  2.20.0-150200.4.33.1 lock rpm