{"old": "/home/jenkins/agent/workspace/multiarch/src-openeuler/aarch64/log4j/old_rpms/", "new": "/home/jenkins/agent/workspace/multiarch/src-openeuler/aarch64/log4j/new_rpms/", "compare_result": "not pass", "compare_details": {"same": {"same_details": {"old": [], "new": []}, "same_num": 0}, "diff": {"diff_details": {"log4j-web": {"name": {"old": "log4j-web-2.17.2-1.oe1.noarch.rpm", "new": "log4j-web-2.20.0-2.oe1.noarch.rpm"}, "RPM Level": "level4", "rpm requires": {"diff": {"old": ["mvn(org.apache.logging.log4j:log4j-api) = 2.17.2", "mvn(org.apache.logging.log4j:log4j-core) = 2.17.2"], "new": ["mvn(org.apache.logging.log4j:log4j-api) = 2.20.0", "mvn(org.apache.logging.log4j:log4j-core) = 2.20.0"]}, "less": ["java-headless >= 1:1.8", "rpmlib(PayloadIsXz) <= 5.2"], "more": ["rpmlib(PayloadIsZstd) <= 5.4.18"]}, "rpm provides": {}, "rpm files": {}, "rpm jabi": {}, "rpm lib": {}}, "log4j-slf4j": {"name": {"old": "log4j-slf4j-2.17.2-1.oe1.noarch.rpm", "new": "log4j-slf4j-2.20.0-2.oe1.noarch.rpm"}, "RPM Level": "level4", "rpm requires": {"diff": {"old": ["mvn(org.apache.logging.log4j:log4j-api) = 2.17.2", "mvn(org.apache.logging.log4j:log4j-core) = 2.17.2"], "new": ["mvn(org.apache.logging.log4j:log4j-api) = 2.20.0", "mvn(org.apache.logging.log4j:log4j-core) = 2.20.0"]}, "less": ["java-headless >= 1:1.8", "rpmlib(PayloadIsXz) <= 5.2"], "more": ["rpmlib(PayloadIsZstd) <= 5.4.18"]}, "rpm provides": {}, "rpm files": {}, "rpm jabi": {"diff": {"old": ["log4j-slf4j-impl.jar"], "new": ["log4j-slf4j-impl.jar"]}}, "rpm lib": {}}, "log4j-jcl": {"name": {"old": "log4j-jcl-2.17.2-1.oe1.noarch.rpm", "new": "log4j-jcl-2.20.0-2.oe1.noarch.rpm"}, "RPM Level": "level4", "rpm requires": {"diff": {"old": ["mvn(org.apache.logging.log4j:log4j-api) = 2.17.2"], "new": ["mvn(org.apache.logging.log4j:log4j-api) = 2.20.0"]}, "less": ["java-headless >= 1:1.8", "rpmlib(PayloadIsXz) <= 5.2"], "more": ["rpmlib(PayloadIsZstd) <= 5.4.18"]}, "rpm provides": {}, "rpm files": {}, "rpm jabi": {}, "rpm lib": {}}, "log4j-bom": {"name": {"old": "log4j-bom-2.17.2-1.oe1.noarch.rpm", "new": "log4j-bom-2.20.0-2.oe1.noarch.rpm"}, "RPM Level": "level4", "rpm requires": {"less": ["mvn(org.apache.logging:logging-parent:pom:)", "java-headless", "rpmlib(PayloadIsXz) <= 5.2"], "more": ["rpmlib(PayloadIsZstd) <= 5.4.18"]}, "rpm provides": {}, "rpm files": {}}, "log4j": {"name": {"old": "log4j-2.17.2-1.oe1.noarch.rpm", "new": "log4j-2.20.0-2.oe1.noarch.rpm"}, "RPM Level": "level4", "rpm requires": {"less": ["javapackages-tools", "rpmlib(PayloadIsXz) <= 5.2", "mvn(com.fasterxml.jackson.core:jackson-core)", "mvn(com.fasterxml.jackson.core:jackson-databind)", "mvn(com.fasterxml.jackson.core:jackson-annotations)", "java-headless >= 1:1.8"], "more": ["rpmlib(PayloadIsZstd) <= 5.4.18"]}, "rpm provides": {"less": ["osgi(org.apache.logging.log4j.docker) = 2.17.2", "mvn(org.apache.logging.log4j:log4j-layout-template-json) = 2.17.2", "osgi(org.apache.logging.log4j.layout.template.json) = 2.17.2", "mvn(org.apache.logging.log4j:log4j-docker:pom:) = 2.17.2", "mvn(org.apache.logging.log4j:log4j-jakarta-web:pom:) = 2.17.2", "mvn(org.apache.logging.log4j:log4j-docker) = 2.17.2", "mvn(org.apache.logging.log4j:log4j-jakarta-web) = 2.17.2", "osgi(org.apache.logging.log4j.jakarta-web) = 2.17.2", "mvn(org.apache.logging.log4j:log4j-layout-template-json:pom:) = 2.17.2"], "more": ["mvn(org.apache.logging.log4j:log4j-jakarta-smtp:pom:) = 2.20.0", "osgi(org.apache.logging.log4j.jpl) = 2.20.0", "mvn(org.apache.logging.log4j:log4j-jakarta-smtp) = 2.20.0", "mvn(org.apache.logging.log4j:log4j-api-java9:pom:) = 2.20.0", "osgi(org.apache.logging.log4j.jakarta-smtp) = 2.20.0", "mvn(org.apache.logging.log4j:log4j-core-java9:pom:) = 2.20.0", "mvn(org.apache.logging.log4j:log4j-jpl:pom:) = 2.20.0", "mvn(org.apache.logging.log4j:log4j-jpl) = 2.20.0"]}, "rpm files": {"less": ["/usr/share/maven-poms/log4j/log4j-jakarta-web.pom", "/usr/share/maven-poms/log4j/log4j-layout-template-json.pom", "/usr/share/maven-poms/log4j/log4j-docker.pom"], "more": ["/usr/share/maven-poms/log4j/log4j-api-java9.pom", "/usr/share/maven-poms/log4j/log4j-jpl.pom", "/usr/share/maven-poms/log4j/log4j-jakarta-smtp.pom", "/usr/share/maven-poms/log4j/log4j-core-java9.pom"]}, "rpm jabi": {"diff": {"old": ["log4j-api.jar", "log4j-core.jar", "log4j.jar"], "new": ["log4j-api.jar", "log4j-core.jar", "log4j.jar"]}}, "rpm lib": {"less": ["/usr/share/java/log4j/log4j-docker.jar", "/usr/share/java/log4j/log4j-jakarta-web.jar", "/usr/share/java/log4j/log4j-layout-template-json.jar"], "more": ["/usr/share/java/log4j/log4j-jakarta-smtp.jar", "/usr/share/java/log4j/log4j-jpl.jar"]}}}, "diff_num": 5}, "less": {"less_details": {"log4j-jmx-gui": {"Name": "log4j-jmx-gui-2.17.2-1.oe1.noarch.rpm", "RPM Level": "level4", "Obsoletes": "no", "Provides": "no"}, "log4j-taglib": {"Name": "log4j-taglib-2.17.2-1.oe1.noarch.rpm", "RPM Level": "level4", "Obsoletes": "no", "Provides": "no"}}, "less_num": 2}, "more": {"more_details": {}, "more_num": 0}}, "pr_link": "https://gitcode.com/src-openeuler/log4j/pull/57", "pr_changelog": "* Tue Jul 14 2026 Qin Fandong <qinfandong@kylinos.cn> - 2.20.0-2\n- Type:CVE\n- ID:CVE-2026-34481, CVE-2026-49844\n- SUG:NA\n- DESC:fix CVE-2026-34481 and CVE-2026-49844: serialize non-finite floating-point values as JSON strings\n"}