[CLSA-2026:1784624635] log4j: Fix of CVE-2026-49844
Type:
security
Severity:
Moderate
Release date:
2026-07-21 09:04:19 UTC
Description:
- CVE-2026-49844: fix MapMessage JSON serialization of non-finite floating-point values (NaN, Infinity)
CVEs fixed:
Updated packages:
  • log4j-2.17.2-1.el9.tuxcare.els2.noarch.rpm
    sha:549aa39875ed03bff5bd5842a61ecd04b5f7cae9caa27ce9e959ac6c99ed3ac3
  • log4j-jcl-2.17.2-1.el9.tuxcare.els2.noarch.rpm
    sha:e11058123fd39f57ca7c790876188c405189d6d00dd425aab8af01a917d630a7
  • log4j-slf4j-2.17.2-1.el9.tuxcare.els2.noarch.rpm
    sha:2c47a0879d16b441ada1e31cb867b806f5f646226f2d22b265da14c91805da3f
  • log4j-web-2.17.2-1.el9.tuxcare.els2.noarch.rpm
    sha:dc99394b18cb547872e55968ef466d3dba27485b8a35d23e276575a30739ae21
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.