<!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /></head><body><div data-html-editor-font-wrapper="true" style="font-family: arial, sans-serif; font-size: 13px;">Hello <br>I use "libapache2-mod-shib2" for my SP and "libapache2-mod-shib2" use log4j in shibd.logger (log4j.appender).<br>Is libapache2-mod-shib2 affected by log4shell-vulnerability?<br><br>Here is my version of libapache2-mod-shib2<br><a href="https://packages.ubuntu.com/source/bionic/shibboleth-sp2">https://packages.ubuntu.com/source/bionic/shibboleth-sp2</a> </div></body></html>