[WLUG] Bug in the news

Are we worried about Log4j / Log4shell (CVE-2021-44228)? I run Apache and never look at the log files. Where are they anyway? Can I configure them out of existence, or just log boring stuff? I don't need remote logging. Can I just firewall packets? -- Keith