Log4shell: US demands Christmas Eve deadline for hack fix

Federal agencies must protect themselves against a widespread security flaw by 24 December.