SUSE-RU-2026:3145-1: important: Recommended update for log4j

SLE-UPDATES null at suse.de
Tue Jul 21 16:30:10 UTC 2026 

# Recommended update for log4j

Announcement ID: SUSE-RU-2026:3145-1  
Release Date: 2026-07-21T08:39:04Z  
Rating: important  
References:

  
Affected Products:

  * Basesystem Module 15-SP7
  * SUSE Linux Enterprise Desktop 15 SP7
  * SUSE Linux Enterprise High Performance Computing 15 SP4
  * SUSE Linux Enterprise High Performance Computing 15 SP5
  * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
  * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
  * SUSE Linux Enterprise Real Time 15 SP7
  * SUSE Linux Enterprise Server 15 SP4
  * SUSE Linux Enterprise Server 15 SP4 LTSS
  * SUSE Linux Enterprise Server 15 SP5
  * SUSE Linux Enterprise Server 15 SP5 LTSS
  * SUSE Linux Enterprise Server 15 SP6
  * SUSE Linux Enterprise Server 15 SP6 LTSS
  * SUSE Linux Enterprise Server 15 SP7
  * SUSE Linux Enterprise Server for SAP Applications 15 SP4
  * SUSE Linux Enterprise Server for SAP Applications 15 SP5
  * SUSE Linux Enterprise Server for SAP Applications 15 SP6
  * SUSE Linux Enterprise Server for SAP Applications 15 SP7

  
  
An update that can now be installed.

## Description:

This update for log4j fixes the following issues:

log4j was updated and includes fixes and improvements from versions 2.21.0
through 2.26.0:

  * Bugs fixed:
  * Fixed crashes when logging errors with stack traces modified by other
    threads
  * Fixed FATAL-level log messages being silently discarded
  * Fixed memory leaks in several components
  * Fixed log file headers not being written correctly when files are recreated
  * Fixed log file rotation failures
  * Fixed configuration file loading from HTTP sources
  * Fixed date and time formatting issues in logs
  * Fixed problems when multiple threads modify logger settings simultaneously
  * Fixed MongoDB appender connection issues

  * New Features Added:

  * Support for ZStandard compression for log files
  * Support for LMAX Disruptor 4.x (high-performance logging)
  * Better support for GraalVM environments
  * Java 8 users now get sub-millisecond precision timestamps

  * Features Removed:

  * JMX GUI tool (moved to separate release)
  * Flume Appender (moved to separate release)
  * Kubernetes lookup feature (users should migrate to io.fabric8:kubernetes-
    log4j)
  * JAnsi library support (Windows 10+ has built-in color support)

  * Important Changes:

  * JMX monitoring is now DISABLED by default (set log4j2.disableJmx=false to
    enable)
  * Default log format has changed
  * Configuration scripts now require explicit names

  * Deprecations (features to be removed in the future):

  * MongoDB4 module (use standard MongoDB module instead)
  * EventLogger class
  * Some builder methods (replaced with setter methods)

New Runtime Dependencies:

  * jackson-dataformat-xml
  * stax2-api
  * woodstox-core

New and Updated Build Dependencies:

  * aalto-xml (updated from version 1.3.3 to 1.4.0)
  * jakarta-annotations (new)
  * jakarta-messaging (new)
  * jspecify (new)

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Enterprise Server 15 SP5 LTSS  
    zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-3145=1

  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4  
    zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-3145=1

  * Basesystem Module 15-SP7  
    zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-3145=1

  * SUSE Linux Enterprise Server for SAP Applications 15 SP5  
    zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-3145=1

  * SUSE Linux Enterprise Server for SAP Applications 15 SP6  
    zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3145=1

  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5  
    zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-3145=1

  * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5  
    zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-3145=1

  * SUSE Linux Enterprise Server 15 SP6 LTSS  
    zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3145=1

  * SUSE Linux Enterprise Server 15 SP4 LTSS  
    zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-3145=1

  * SUSE Linux Enterprise Server for SAP Applications 15 SP4  
    zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-3145=1

  * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4  
    zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-3145=1

## Package List:

  * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch)
    * log4j-2.26.0-150200.4.36.1
    * log4j-slf4j-2.26.0-150200.4.36.1
    * stax2-api-4.3.0-150200.3.8.1
    * log4j-javadoc-2.26.0-150200.4.36.1
    * woodstox-core-7.2.1-150200.3.10.1
    * jackson-dataformat-xml-2.18.8-150200.5.5.1
    * log4j-jcl-2.26.0-150200.4.36.1
  * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch)
    * log4j-2.26.0-150200.4.36.1
    * log4j-slf4j-2.26.0-150200.4.36.1
    * stax2-api-4.3.0-150200.3.8.1
    * log4j-javadoc-2.26.0-150200.4.36.1
    * woodstox-core-7.2.1-150200.3.10.1
    * jackson-dataformat-xml-2.18.8-150200.5.5.1
    * log4j-jcl-2.26.0-150200.4.36.1
  * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch)
    * log4j-slf4j-2.26.0-150200.4.36.1
    * log4j-2.26.0-150200.4.36.1
    * stax2-api-4.3.0-150200.3.8.1
    * log4j-javadoc-2.26.0-150200.4.36.1
    * woodstox-core-7.2.1-150200.3.10.1
    * jackson-dataformat-xml-2.18.8-150200.5.5.1
    * log4j-jcl-2.26.0-150200.4.36.1
  * Basesystem Module 15-SP7 (noarch)
    * log4j-2.26.0-150200.4.36.1
    * log4j-slf4j-2.26.0-150200.4.36.1
    * stax2-api-4.3.0-150200.3.8.1
    * log4j-javadoc-2.26.0-150200.4.36.1
    * woodstox-core-7.2.1-150200.3.10.1
    * jackson-dataformat-xml-2.18.8-150200.5.5.1
    * log4j-jcl-2.26.0-150200.4.36.1
  * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch)
    * log4j-slf4j-2.26.0-150200.4.36.1
    * log4j-2.26.0-150200.4.36.1
    * stax2-api-4.3.0-150200.3.8.1
    * log4j-javadoc-2.26.0-150200.4.36.1
    * woodstox-core-7.2.1-150200.3.10.1
    * jackson-dataformat-xml-2.18.8-150200.5.5.1
    * log4j-jcl-2.26.0-150200.4.36.1
  * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch)
    * log4j-slf4j-2.26.0-150200.4.36.1
    * log4j-2.26.0-150200.4.36.1
    * stax2-api-4.3.0-150200.3.8.1
    * log4j-javadoc-2.26.0-150200.4.36.1
    * woodstox-core-7.2.1-150200.3.10.1
    * jackson-dataformat-xml-2.18.8-150200.5.5.1
    * log4j-jcl-2.26.0-150200.4.36.1
  * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch)
    * log4j-2.26.0-150200.4.36.1
    * log4j-slf4j-2.26.0-150200.4.36.1
    * stax2-api-4.3.0-150200.3.8.1
    * log4j-javadoc-2.26.0-150200.4.36.1
    * woodstox-core-7.2.1-150200.3.10.1
    * jackson-dataformat-xml-2.18.8-150200.5.5.1
    * log4j-jcl-2.26.0-150200.4.36.1
  * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch)
    * log4j-slf4j-2.26.0-150200.4.36.1
    * log4j-2.26.0-150200.4.36.1
    * stax2-api-4.3.0-150200.3.8.1
    * log4j-javadoc-2.26.0-150200.4.36.1
    * woodstox-core-7.2.1-150200.3.10.1
    * jackson-dataformat-xml-2.18.8-150200.5.5.1
    * log4j-jcl-2.26.0-150200.4.36.1
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch)
    * log4j-slf4j-2.26.0-150200.4.36.1
    * log4j-2.26.0-150200.4.36.1
    * stax2-api-4.3.0-150200.3.8.1
    * log4j-javadoc-2.26.0-150200.4.36.1
    * woodstox-core-7.2.1-150200.3.10.1
    * jackson-dataformat-xml-2.18.8-150200.5.5.1
    * log4j-jcl-2.26.0-150200.4.36.1
  * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch)
    * log4j-2.26.0-150200.4.36.1
    * log4j-slf4j-2.26.0-150200.4.36.1
    * stax2-api-4.3.0-150200.3.8.1
    * log4j-javadoc-2.26.0-150200.4.36.1
    * woodstox-core-7.2.1-150200.3.10.1
    * jackson-dataformat-xml-2.18.8-150200.5.5.1
    * log4j-jcl-2.26.0-150200.4.36.1
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch)
    * log4j-2.26.0-150200.4.36.1
    * log4j-slf4j-2.26.0-150200.4.36.1
    * stax2-api-4.3.0-150200.3.8.1
    * log4j-javadoc-2.26.0-150200.4.36.1
    * woodstox-core-7.2.1-150200.3.10.1
    * jackson-dataformat-xml-2.18.8-150200.5.5.1
    * log4j-jcl-2.26.0-150200.4.36.1

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20260721/3564c1e9/attachment.htm>

More information about the sle-updates mailing list