Unrated
TuxCare security update for org.apache.logging.log4j (7 CVEs)
Type: withdrawalSources: OSV
TuxCare rebuilt 23 org.apache.logging.log4j packages to address 7 CVEs. Fixed in 2.11.0-tuxcare.1.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 14:13 UTC · Revision 1
Source evidence
TuxCare security update for org.apache.logging.log4j (7 CVEs)
core-osv · Original sourcePublished 31 Aug 2026, 22:29 UTC
TuxCare rebuilt 23 org.apache.logging.log4j packages to address 7 CVEs. Fixed in 2.11.0-tuxcare.1.
osv:CLSA-2026-1788215347
org.apache.logging.log4j:log4j
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-1.2-api
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-api
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-appserver
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-bom
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-cassandra
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-core
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-couchdb
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-flume-ng
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-iostreams
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-jcl
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-jdbc-dbcp2
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-jmx-gui
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-jpa
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-jul
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-liquibase
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-mongodb2
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-mongodb3
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-osgi
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-slf4j-impl
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-taglib
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-to-slf4j
Fixed versions: 2.11.0-tuxcare.1
org.apache.logging.log4j:log4j-web
Fixed versions: 2.11.0-tuxcare.1
Complete source record
{
"id": "eae962036ed0c8f982919400d13d757af6308c474ed3e6cd306854e20677e7a3",
"url": "https://osv.dev/vulnerability/CLSA-2026-1788215347",
"method": "structured",
"payload": {
"kind": "withdrawal",
"title": "TuxCare security update for org.apache.logging.log4j (7 CVEs)",
"summary": "TuxCare rebuilt 23 org.apache.logging.log4j packages to address 7 CVEs. Fixed in 2.11.0-tuxcare.1.",
"evidence": "osv:CLSA-2026-1788215347",
"products": [
{
"name": {
"value": "org.apache.logging.log4j:log4j",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-1.2-api",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-api",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-appserver",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-bom",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-cassandra",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-core",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-couchdb",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-flume-ng",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-iostreams",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-jcl",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-jdbc-dbcp2",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-jmx-gui",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-jpa",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-jul",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-liquibase",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-mongodb2",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-mongodb3",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-osgi",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-slf4j-impl",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-taglib",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-to-slf4j",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/21/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "org.apache.logging.log4j:log4j-web",
"evidence": "/affected/22/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.11.0-tuxcare.1",
"evidence": "/affected/22/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1788215347",
"aliases": [
"CLSA-2026-1788215347"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j",
"purl": "pkg:maven/org.apache.logging.log4j/log4j",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-1.2-api",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-1.2-api",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-api",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-api",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-appserver",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-appserver",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-bom",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-bom",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-cassandra",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-cassandra",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-core",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-core",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-couchdb",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-couchdb",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-flume-ng",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-flume-ng",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-iostreams",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-iostreams",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-jcl",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-jcl",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-jdbc-dbcp2",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-jdbc-dbcp2",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-jmx-gui",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-jmx-gui",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-jpa",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-jpa",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-jul",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-jul",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-liquibase",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-liquibase",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-mongodb2",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-mongodb2",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-mongodb3",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-mongodb3",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-osgi",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-osgi",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-slf4j-impl",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-taglib",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-taglib",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-to-slf4j",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.11.0-tuxcare.1"
}
]
}
],
"package": {
"name": "org.apache.logging.log4j:log4j-web",
"purl": "pkg:maven/org.apache.logging.log4j/log4j-web",
"ecosystem": "TuxCare:Maven"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788215347.json"
}
}
],
"modified": "2026-10-26T13:21:31Z",
"provider": "osv",
"upstream": [
"CVE-2012-0881",
"CVE-2013-4002",
"CVE-2018-2799",
"CVE-2020-14338",
"CVE-2022-23437",
"CVE-2024-47554",
"CVE-2026-45205"
],
"references": []
},
"related_cves": [
{
"value": "CVE-2012-0881",
"evidence": "/upstream"
},
{
"value": "CVE-2013-4002",
"evidence": "/upstream"
},
{
"value": "CVE-2018-2799",
"evidence": "/upstream"
},
{
"value": "CVE-2020-14338",
"evidence": "/upstream"
},
{
"value": "CVE-2022-23437",
"evidence": "/upstream"
},
{
"value": "CVE-2024-47554",
"evidence": "/upstream"
},
{
"value": "CVE-2026-45205",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 453376,
"published_at": "2026-08-31T22:29:07+00:00"
}