Your submission was sent successfully! Close

USN-5223-1: Apache Log4j 1.2 vulnerability

12 January 2022

Apache Log4j 1.2 could be made to crash or run programs if it received specially crafted input.

Releases

Packages

Details

It was discovered that Apache Log4j 1.2 was vulnerable to deserialization of
untrusted data if the configuration file was editable. An attacker could use
this vulnerability to cause a DoS or possibly execute arbitrary code.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 21.10
Ubuntu 21.04
Ubuntu 20.04
Ubuntu 18.04

In general, a standard system update will make all the necessary changes.

References