A new Debian Linux update has been published: DLA 2905-1: apache-log4j1.2 security update
An apache-log4j1.2 security update has been released for Debian GNU/Linux 9 LTS to address multiple security vulnerabilities which could be exploited for remote code execution.Read more @ Linux Compatible