FYI: Surgemail is not affected by the log4j exploit.

You 'may' be running other software on the same system that is affected, 
but surgemail itself is not, none of the components we use contain log4j.

ChrisP