CVE-2026-34481: fixed versions by distro
Every tracked distribution release and image, with the package version that counts as fixed and the vendor's own page.
- Overall
- Partly fixed
- Severity
Medium6.3CVSS v4Apache Logging Services
- Last checked
Debian
| Release | Package | Fixed version | State | Verified | Source |
|---|---|---|---|---|---|
| sid(unstable) | apache-log4j2 | 2.26.1-1 | Fixed | Source | |
| 12(bookworm) security (LTS team) | apache-log4j2 | No fixed version published yet | No fix yet | Source | |
| forky(testing) | apache-log4j2 | No fixed version published yet | No fix yet | Source | |
| 13(trixie) security | apache-log4j2 | No fixed version published yet | No fix yet | Source |
Ubuntu
| Release | Package | Fixed version | State | Verified | Source |
|---|---|---|---|---|---|
| 25.10(questing) | apache-log4j2 | No fixed version published yet | End of life | Source |