Hi, everyone.

As you may have seen in the news, a new vulnerability was recently discovered/announced in java's log4j logging library. This is a very popular library, and so a lot of companies were/are affected.

However, Revelation Software's engine server (which is written in java) does NOT use the log4j logging library, and so it does not appear to be vulnerable to this new exploit. The telnet server (also written in java) includes the log4j library in its "classpath", but does not actually use any of the logging functionality, and so also appears to be safe.

Please feel free to let us know if you have any questions about this issue.

Regards,

- Bryan Shumsky

Revelation Software, Inc.

Thanks Bryan. Yes, we're getting a few customers doing their due diligence in asking these questions ;)

Cheers, M@

Vernon Systems

View this thread on the Works forum...