CVE-2026-34478: fixed versions by distro
Every tracked distribution release and image, with the package version that counts as fixed and the vendor's own page.
- Overall
- Partly fixed
- Severity
Medium6.9CVSS v4Apache Logging Services
- Last checked
Debian
| Release | Package | Fixed version | State | Verified | Source |
|---|---|---|---|---|---|
| 12(bookworm) security (LTS team) | apache-log4j2 | No fixed version published yet | Not affectedVendor statement | Source | |
| forky(testing) | apache-log4j2 | No fixed version published yet | Not affectedVendor statement | Source | |
| sid(unstable) | apache-log4j2 | No fixed version published yet | Not affectedVendor statement | Source | |
| 13(trixie) security | apache-log4j2 | No fixed version published yet | Not affectedVendor statement | Source |
Ubuntu
| Release | Package | Fixed version | State | Verified | Source |
|---|---|---|---|---|---|
| 25.10(questing) | apache-log4j2 | No fixed version published yet | End of life | Source |