Ubuntu Security Update USN-5223-1: Apache Log4j 1.2 vulnerability

[LinuxBot]

It was discovered that Apache Log4j 1.2 was vulnerable to deserialization of untrusted data if the configuration file was editable. An attacker could use this vulnerability to cause a DoS or possibly execute arbitrary code.

Continue reading...