Ubuntu Security Notice 6282-1 - Jackson Henry discovered that Velocity Tools incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code.
f5d8dcd9b2dd7d1004589d8aff05de5a8c1772762dcd3a85a846a7c637cfc409