cve-2026-34478
csaf_opensuse
Description
SUSE CVE-2026-34478
Timeline
- Published
- 2026-04-14 23:26 UTC
- Last Modified
- 2026-04-14
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "SUSE CVE-2026-34478",
"title": "Title"
},
{
"category": "description",
"text": "Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout , in versions 2.21.0 through 2.25.3, is vulnerable to log injection via CRLF sequences due to undocumented renames of security-relevant configuration attributes.\n\nTwo distinct issues affect users of stream-based syslog services who configure Rfc5424Layout directly:\n\n * The newLineEscape attribute was silently renamed, causing newline escaping to stop working for users of TCP framing (RFC 6587), exposing them to CRLF injection in log output.\n * The useTlsMessageFormat attribute was silently renamed, causing users of TLS framing (RFC 5425) to be silently downgraded to unframed TCP (RFC 6587), without newline escaping.\n\n\nUsers of the SyslogAppender are not affected, as its configuration attributes were not modified.\n\nUsers are advised to upgrade to Apache Log4j Core 2.25.4, which corrects this issue.",
"title": "Description of the CVE"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34478",
"url": "https://www.suse.com/security/cve/CVE-2026-34478"
},
{
"category": "external",
"summary": "SUSE Security Ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "external",
"summary": "SUSE Bug 1262052 for CVE-2026-34478",
"url": "https://bugzilla.suse.com/1262052"
}
],
"title": "SUSE CVE CVE-2026-34478",
"tracking": {
"current_release_date": "2026-04-14T23:26:07Z",
"generator": {
"date": "2026-04-14T23:26:07Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf-vex.pl",
"version": "1"
}
},
"id": "CVE-2026-34478",
"initial_release_date": "2026-04-14T23:26:07Z",
"revision_history": [
{
"date": "2026-04-14T23:26:07Z",
"number": "2",
"summary": "vulnerabilities added,references added,severity changed from to moderate"
}
],
"status": "interim",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Desktop 15 SP7",
"product_id": "SUSE Linux Enterprise Desktop 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP7",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP7",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP7",
"product_id": "SUSE Linux Enterprise Server 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server Teradata 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server Teradata 12 SP3",
"product_id": "SUSE Linux Enterprise Server Teradata 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_teradata:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server Teradata 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server Teradata 15 SP4",
"product_id": "SUSE Linux Enterprise Server Teradata 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_teradata:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp7"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
},
{
"category": "product_version",
"name": "log4j",
"product": {
"name": "log4j",
"product_id": "log4j",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/log4j@?upstream=log4j.src.rpm"
}
}
},
{
"category": "product_version",
"name": "log4j-javadoc",
"product": {
"name": "log4j-javadoc",
"product_id": "log4j-javadoc",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/log4j-javadoc@?upstream=log4j.src.rpm"
}
}
},
{
"category": "product_version",
"name": "log4j-jcl",
"product": {
"name": "log4j-jcl",
"product_id": "log4j-jcl",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/log4j-jcl@?upstream=log4j.src.rpm"
}
}
},
{
"category": "product_version",
"name": "log4j-manual",
"product": {
"name": "log4j-manual",
"product_id": "log4j-manual",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/log4j-manual@?upstream=log4j.src.rpm"
}
}
},
{
"category": "product_version",
"name": "log4j-slf4j",
"product": {
"name": "log4j-slf4j",
"product_id": "log4j-slf4j",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/log4j-slf4j@?upstream=log4j.src.rpm"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server 15 SP7",
"product_id": "SUSE Linux Enterprise Server 15 SP7:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of SUSE Linux Enterprise Server 15 SP7",
"product_id": "SUSE Linux Enterprise Server 15 SP7:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of SUSE Linux Enterprise Server 15 SP7",
"product_id": "SUSE Linux Enterprise Server 15 SP7:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of SUSE Linux Enterprise Server 15 SP7",
"product_id": "SUSE Linux Enterprise Server 15 SP7:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Desktop 15 SP7",
"product_id": "SUSE Linux Enterprise Desktop 15 SP7:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of SUSE Linux Enterprise Desktop 15 SP7",
"product_id": "SUSE Linux Enterprise Desktop 15 SP7:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of SUSE Linux Enterprise Desktop 15 SP7",
"product_id": "SUSE Linux Enterprise Desktop 15 SP7:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of SUSE Linux Enterprise Desktop 15 SP7",
"product_id": "SUSE Linux Enterprise Desktop 15 SP7:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP7:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP7:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP7:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP7:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise High Performance Computing 15 SP7",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP7:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of SUSE Linux Enterprise High Performance Computing 15 SP7",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP7:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of SUSE Linux Enterprise High Performance Computing 15 SP7",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP7:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of SUSE Linux Enterprise High Performance Computing 15 SP7",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP7:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-manual as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:log4j-manual"
},
"product_reference": "log4j-manual",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server Teradata 12 SP3",
"product_id": "SUSE Linux Enterprise Server Teradata 12 SP3:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server Teradata 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server Teradata 15 SP4",
"product_id": "SUSE Linux Enterprise Server Teradata 15 SP4:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server Teradata 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-javadoc as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:log4j-javadoc"
},
"product_reference": "log4j-javadoc",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-34478",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34478"
}
],
"notes": [
{
"category": "general",
"text": "Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout , in versions 2.21.0 through 2.25.3, is vulnerable to log injection via CRLF sequences due to undocumented renames of security-relevant configuration attributes.\n\nTwo distinct issues affect users of stream-based syslog services who configure Rfc5424Layout directly:\n\n * The newLineEscape attribute was silently renamed, causing newline escaping to stop working for users of TCP framing (RFC 6587), exposing them to CRLF injection in log output.\n * The useTlsMessageFormat attribute was silently renamed, causing users of TLS framing (RFC 5425) to be silently downgraded to unframed TCP (RFC 6587), without newline escaping.\n\n\nUsers of the SyslogAppender are not affected, as its configuration attributes were not modified.\n\nUsers are advised to upgrade to Apache Log4j Core 2.25.4, which corrects this issue.",
"title": "CVE description"
}
],
"product_status": {
"known_not_affected": [
"SUSE Linux Enterprise Desktop 15 SP7:log4j",
"SUSE Linux Enterprise Desktop 15 SP7:log4j-javadoc",
"SUSE Linux Enterprise Desktop 15 SP7:log4j-jcl",
"SUSE Linux Enterprise Desktop 15 SP7:log4j-slf4j",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:log4j",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:log4j-javadoc",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:log4j-jcl",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:log4j-slf4j",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:log4j",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:log4j-javadoc",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:log4j-jcl",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:log4j-slf4j",
"SUSE Linux Enterprise High Performance Computing 15 SP7:log4j",
"SUSE Linux Enterprise High Performance Computing 15 SP7:log4j-javadoc",
"SUSE Linux Enterprise High Performance Computing 15 SP7:log4j-jcl",
"SUSE Linux Enterprise High Performance Computing 15 SP7:log4j-slf4j",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:log4j",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:log4j-javadoc",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:log4j-jcl",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:log4j-slf4j",
"SUSE Linux Enterprise Server 12 SP4-LTSS:log4j",
"SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:log4j",
"SUSE Linux Enterprise Server 12 SP5-LTSS:log4j",
"SUSE Linux Enterprise Server 15 SP1-LTSS:log4j",
"SUSE Linux Enterprise Server 15 SP1-LTSS:log4j-manual",
"SUSE Linux Enterprise Server 15 SP3-LTSS:log4j",
"SUSE Linux Enterprise Server 15 SP3-LTSS:log4j-javadoc",
"SUSE Linux Enterprise Server 15 SP3-LTSS:log4j-jcl",
"SUSE Linux Enterprise Server 15 SP3-LTSS:log4j-slf4j",
"SUSE Linux Enterprise Server 15 SP4-LTSS:log4j",
"SUSE Linux Enterprise Server 15 SP4-LTSS:log4j-javadoc",
"SUSE Linux Enterprise Server 15 SP4-LTSS:log4j-jcl",
"SUSE Linux Enterprise Server 15 SP4-LTSS:log4j-slf4j",
"SUSE Linux Enterprise Server 15 SP5-LTSS:log4j",
"SUSE Linux Enterprise Server 15 SP5-LTSS:log4j-javadoc",
"SUSE Linux Enterprise Server 15 SP5-LTSS:log4j-jcl",
"SUSE Linux Enterprise Server 15 SP5-LTSS:log4j-slf4j",
"SUSE Linux Enterprise Server 15 SP6-LTSS:log4j",
"SUSE Linux Enterprise Server 15 SP6-LTSS:log4j-javadoc",
"SUSE Linux Enterprise Server 15 SP6-LTSS:log4j-jcl",
"SUSE Linux Enterprise Server 15 SP6-LTSS:log4j-slf4j",
"SUSE Linux Enterprise Server 15 SP7:log4j",
"SUSE Linux Enterprise Server 15 SP7:log4j-javadoc",
"SUSE Linux Enterprise Server 15 SP7:log4j-jcl",
"SUSE Linux Enterprise Server 15 SP7:log4j-slf4j",
"SUSE Linux Enterprise Server Teradata 12 SP3:log4j",
"SUSE Linux Enterprise Server Teradata 15 SP4:log4j",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:log4j",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:log4j-javadoc",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:log4j-jcl",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:log4j-slf4j",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:log4j",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:log4j-javadoc",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:log4j-jcl",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:log4j-slf4j",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:log4j",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:log4j-javadoc",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:log4j-jcl",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:log4j-slf4j",
"SUSE Linux Enterprise Server for SAP Applications 15 SP7:log4j",
"SUSE Linux Enterprise Server for SAP Applications 15 SP7:log4j-javadoc",
"SUSE Linux Enterprise Server for SAP Applications 15 SP7:log4j-jcl",
"SUSE Linux Enterprise Server for SAP Applications 15 SP7:log4j-slf4j",
"openSUSE Leap 15.6:log4j",
"openSUSE Leap 15.6:log4j-javadoc",
"openSUSE Leap 15.6:log4j-jcl",
"openSUSE Leap 15.6:log4j-slf4j"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34478",
"url": "https://www.suse.com/security/cve/CVE-2026-34478"
},
{
"category": "external",
"summary": "SUSE Security Ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "external",
"summary": "SUSE Bug 1262052 for CVE-2026-34478",
"url": "https://bugzilla.suse.com/1262052"
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-10T16:02:17Z",
"details": "moderate"
}
],
"title": "CVE-2026-34478"
}
]
}
Enrichment data
Aggregated bundle (all enrichments)