CVE-2022-23307

Affected packages

Debian:11 / apache-log4j1.2

Package

Name
apache-log4j1.2
Purl
pkg:deb/debian/apache-log4j1.2?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.17-10+deb11u1

Affected versions

1.*

1.2.17-10

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / apache-log4j1.2

Package

Name
apache-log4j1.2
Purl
pkg:deb/debian/apache-log4j1.2?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.17-11

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / apache-log4j1.2

Package

Name
apache-log4j1.2
Purl
pkg:deb/debian/apache-log4j1.2?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.17-11

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/apache/logging-log4j2

Affected ranges

Type
GIT
Repo
https://github.com/apache/logging-log4j2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed