Log4j day zero vulnerability - Pega Search

@kuchj1 I’ve checked and indeed the ‘Search’ docker of Pega 8.5.2 was updated a year ago.

https://hub.docker.com/r/pegasystems/search/tags

However, the 8.5 and 8.5.5 Docker images were fixed.

Please see the explanation on which docker images to use for the fixed versions.

"For versions 8.2 – 8.6, Pega has updated both the main major/minor version of Pegasystems Search (example: “8.5”) and the latest patch version of that major/minor version (example “8.5.5”). Either of these Search Docker images are applicable to all Pega patch versions within the minor version (example: both “8.5” and “8.5.5” apply to 8.5, 8.5.1, 8.5.2, 8.5.3, 8.5.4, and 8.5.5). "

Can you please confirm that once you installed the 8.5 or 8.5.5 versions you saw the fixed JVM version?