I want to intentionally install the old vulnerable version of the liblog4j2-java package in order to test the CVE-2021-44228 vulnerability. I'm using an Ubuntu machine.
I know I can list old package versions with
apt-cache madison liblog4j2-java, but are these still vulnerable?
How can I download the old, but official packages?