Ubuntu Security Notice 6281-1 - Alvaro Munoz discovered that Velocity Engine incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code.
23db43eb8bc97d2334ec675fee1fd962af0c7f9139a18b2adfde72b91dce8a00