Latest information on the BSI security alert: Java log4j

Updated jar file with log4j version 2.16.0 is available
As already communicated, the Java log4j library is included in the HTTPS server of INTUS COM 3.4 and INTUS COM 3.5. We provide - as recommended by the Apache Software Foundation (https://logging.apache.org/log4j/2.x/security.html) - an updated jar file including the secure log4j library version 2.16.0 for replacement in your system. This jar file and the instructions for replacing this file are available for download. You can also find it in the PCS Support Center.

Further analysis of DEXICON 5.1 to 5.4 brings pleasant result
Deeper analysis has shown that the DEXICON 5.4 components themselves do not contain the security-critical log4j core library. However, DEXICON always includes INTUS COM. Only for DEXICON installations with versions 5.1 to 5.4 it should be noted that the INTUS COM HTTPS server could be installed as an optional component. We therefore recommend that customers with DEXICON versions 5.1 to 5.4 check whether the INTUS COM HTTPS server has actually been installed. In this case, we also recommend replacing the jar file in your system.

New DEXICON and INTUS COM version as of 22/01/12
We will also provide corresponding patches for the current versions of DEXICON and INTUS COM from 22/01/12 - as already announced - which will contain the secure log4j with version 2.16.0. These will be the versions DEXICON 5.4.3 and INTUS COM 3.5.2. With the installation of these versions the upgrade to the log4j library version 2.16.0 is done automatically and the security gap is reliably closed.

In general, we would like to inform you as quickly and transparently as possible. We have created a complete list of PCS software products, which shows which products/product versions are verified safe or affected, including recommended solutions. This list is also available for download and in the PCS Support Center. With regard to third-party applications, we are in close coordination with the respective manufacturers. We update this list regularly according to the current state of knowledge.