A new Debian Linux update has been published: DSA 4686-1: apache-log4j1.2 security update
An apache-log4j1.2 security update has been released for both Debian GNU/Linux 9 and 10 to address an issue where an attacker can execute arbitrary code in the context of the logger application.Read more @ Linux Compatible
