==========================================================================
Ubuntu Security Notice USN-4495-1
September 15, 2020

Apache Log4j vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 18.04 LTS

Summary:

Apache Log4j could be made to remotely execute arbitrary code if it
received specially crafted log data.

Software Description:
– apache-log4j1.2: Java-based open-source logging tool

Details:

It was discovered that Apache Log4j does not properly deserialize
untrusted data. An attacker could possibly use this issue to remotely
execute arbitrary code. (CVE-2019-17571)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
liblog4j1.2-java 1.2.17-8+deb10u1build0.18.04.1

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4495-1
CVE-2019-17571

Package Information:

https://launchpad.net/ubuntu/+source/apache-log4j1.2/1.2.17-8+deb10u1build0.18.04.1

—–BEGIN PGP SIGNATURE—–
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=RWn1
—–END PGP SIGNATURE—–
—