I think we we're going to send out a newsletter or email to customers here soon. But long and short of it is, your SmarterMail instance is safe, our environment here @ ST is safe, and as long as you've gone through your environment checking for log4j references hopefully the rest of your environment is safe too. Certainly been an interesting morning for Sys Admins all around I'm sure based on all the message boards and articles I'm seeing.
Good luck!  


EDIT/MORE INFO: We're based on .net and all of our tooling related to SM uses .net, log4j is a java-based library/utility related to logging used in many JAVA projects. Again, we're C#/.NET and we do not use this. We've also checked our backend systems here and verified we aren't using anything that's vulnerable

Thankfully nothing in our environment needed touching, +1 for not using anything Java :)

How about its related components?

How about Cyren Anti-Virus , and Cyren Antispam.

I believe ClamAV (c++), Spamassassin (perl) are unrelated.

SmarterMail and it's components do not use Java at all.