Patch, uh, everything-Apache...like the whole internet.

[AttyPops]

Yikes!
'The internet's on fire' as techs race to fix software flaw | AP News

Amit Yoran, CEO of the cybersecurity firm Tenable, called it “the single biggest, most critical vulnerability of the last decade” — and possibly the biggest in the history of modern computing.

EDIT:
Log4Shell: RCE 0-day exploit found in log4j2, a popular Java logging package | LunaSec
https://www.randori.com/blog/cve-2021-44228/

Probably not just Apache. Looks like an exploit in java logging library routine, from what I read it could impact other things like VMWare.

 

[440BB]

Pretty worrisome. I wonder how long the flaw was accessible before it became a news item.