A few months after reports about a flaw in open-source Java logging library, Davey Winder looks into whether NHS organisations