Ubuntu 20.04 LTS USN-4700-1 High: OpenSSL Security Vulnerability

ubuntu

January 19, 2021

Apache Log4net could made to expose sensitive information if it received a specially crafted configuration file.

Summary

Apache Log4net could made to expose sensitive information if it

received a specially crafted configuration file.

Software Description:

- log4net: Highly configurable logging API for the CLI log4net

Details:

It was discovered that Apache Log4net incorrectly handled certain configuration files.

An attacker could possibly use this issue to expose sensitive information.

Topics Covered

security advisory moderate Ubuntu update instructions information exposure ubuntu attack vector Log4net log4net

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  liblog4net1.2-cil               1.2.10+dfsg-7ubuntu0.20.10.1

Ubuntu 20.04 LTS:
  liblog4net1.2-cil               1.2.10+dfsg-7ubuntu0.20.04.1

Ubuntu 18.04 LTS:
  liblog4net1.2-cil               1.2.10+dfsg-7ubuntu0.18.04.1

Ubuntu 16.04 LTS:
  liblog4net1.2-cil               1.2.10+dfsg-7ubuntu0.16.04.1

In general, a standard system update will make all the necessary changes.