Protect NCP from Log4shell - disable of log4j

[TP75]

You may find my below post useful:

Apache and Log4j, should Nextcloud servers be concerned?

The assumption by @bb77 seems to hold for standard Debian installations. A normal Apache Web-Server install on Debian does not include Log4j and or Java, if I am correct. However, users of a community version of Nextcloud deployed on a Debian system with Java capabilities installed may find the below information useful: https://packages.debian.org/bullseye/liblog4j2-java https://security-tracker.debian.org/tracker/source-package/apache-log4j2 https://security-tracker.debian.org/tracke…

I took this opportunity to add some information on mitigation i.e. disabling log4j in my o.m. article.

Happy hacking.