Debian/log4cxx: medium 5.4
Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to re
Action: Upgrade log4cxx to 1.4.0-1+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.0-1+deb13u1 | - |
Fixed versions
| 1.4.0-1+deb13u1 |
Sources
- osv: DEBIAN-CVE-2025-54812#Debian:13/log4cxx
- https://security-tracker.debian.org/tracker/CVE-2025-54812
published · modified · JSON