A new Debian Linux update has been published: DLA 2211-1: log4net security update
A log4net security update has been released for Debian GNU/Linux 8 LTS to address an XML external entity vulnerability.Read more @ Linux Compatible