On 9th December a major vulnerability was found in Log4j, an open-source Java logging library developed by the Apache Foundation. It is widely used in many global applications and is present in many services.
Systems and services that use the Java logging library, Apache Log4j between versions 2.0 and 2.14.1 are affected. Version 2.15 was released on 10th December as a fix to the issue.
We were made aware of the issue from the National Cyber Security Centre and undertook an immediate review of our systems. We are now in a position to state that the Salus3 platform does not use Log4j, therefore this security vulnerability does not apply to the Salus3 platform.
No further action is required – this is just an information update.