Log4j vulnerability

[John]

The search appliance is not affected by the log4j vulnerability CVE-2021-44228 (log4shell) that allows arbitrary code execution using jndi and ldap. No update is needed.

[mark]

The search appliance is also not affected by the 2nd log4j vulnerability, CVE-2021-45046.

[mark]

One more for the list. Thunderstone products are not vulnerable to CVE-2021-45105, uncontrolled recursion. No version of Thunderstone products are vulnerable to these as they don't use log4j2.