SUSE CVE-2026-34479

🗓️ 14 Apr 2026 23:26:05Reported by Suse CVEType

CVE-2026-34479: Log4j1XmlLayout fails to escape XML 1.0 forbidden chars, producing malformed XML; upgrade to bridge version 2.25.4.

Reporter	Title	Published	Views	Family All 97
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Log4j	24 Jun 202622:08	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Apache Log4j	1 Jul 202605:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	19 Jun 202608:43	–	ibm
IBM Security Bulletins	Security Bulletin: Log4j Core TLS hostname verification bypass via verifyHostName XML attribute allows man-in-the-middle attacks on SMTP/Socket/Syslog appenders.	29 Jun 202613:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in log4j/2.x affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues	24 Jun 202606:08	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of log4j-core-2.25.3.jar, IBM Sterling Connect:Direct Web Services is vulnerable to log injection via CRLF sequences.	3 Jun 202604:27	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in log4j-core-2.25.3.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-34480 ,CVE-2026-34477, CVE-2026-34478, CVE-2026-34479)	29 May 202608:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Apache Log4j	27 May 202617:36	–	ibm
IBM Security Bulletins	Security Bulletin: The Apache Log4J 2 package that is shipped with IBM ApplinX is vulnerable to multiple vulnerabilities (CVE-2026-34480, CVE-2026-34477, CVE-2026-34478, CVE-2026-34479).	11 Jun 202621:17	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
SUSE Linux Enterprise Desktop	15.7	any	log4j	2.20.0-150200.4.33.1	log4j-2.20.0-150200.4.33.1.noarch.rpm
SUSE Linux Enterprise Server	15.4	any	log4j	2.20.0-150200.4.33.1	log4j-2.20.0-150200.4.33.1.noarch.rpm
SUSE Linux Enterprise Server	15.7	any	log4j	2.20.0-150200.4.33.1	log4j-2.20.0-150200.4.33.1.noarch.rpm
SUSE Linux Enterprise Server for SAP applications	15.7	any	log4j	2.20.0-150200.4.33.1	log4j-2.20.0-150200.4.33.1.noarch.rpm
OpenSUSE Tumbleweed	–	any	log4j	2.20.0-2.1	log4j-2.20.0-2.1.noarch.rpm
OpenSUSE Tumbleweed	–	any	log4j-bom	2.20.0-2.1	log4j-bom-2.20.0-2.1.noarch.rpm
SUSE Linux Enterprise Desktop	15.7	any	log4j-javadoc	2.20.0-150200.4.33.1	log4j-javadoc-2.20.0-150200.4.33.1.noarch.rpm
SUSE Linux Enterprise Server	15.4	any	log4j-javadoc	2.20.0-150200.4.33.1	log4j-javadoc-2.20.0-150200.4.33.1.noarch.rpm
SUSE Linux Enterprise Server	15.7	any	log4j-javadoc	2.20.0-150200.4.33.1	log4j-javadoc-2.20.0-150200.4.33.1.noarch.rpm
SUSE Linux Enterprise Server for SAP applications	15.7	any	log4j-javadoc	2.20.0-150200.4.33.1	log4j-javadoc-2.20.0-150200.4.33.1.noarch.rpm

Source	Link
suse	www.suse.com/security/cve/CVE-2026-34479
suse	www.suse.com/support/security/rating/
bugzilla	www.bugzilla.suse.com/1262091
lists	www.lists.suse.com/pipermail/sle-updates/2026-May/046426.html

26 Jun 2026 02:20Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.3

EPSS0.00535