topic Re: Log4j2 Vulnerability [Talend 6.5] in Installing and Upgrading

Log4j2 Vulnerability [Talend 6.5]

wissem1 — Fri, 15 Nov 2024 23:23:07 GMT

Hello,

there is a patch for Talend 6.5 for Log4j2 Vulnerability ?

the JAR to patch is

pax-logging-log4j2-1.10.1-TESB.jar

Best Regard

Wissem

Re: Log4j2 Vulnerability [Talend 6.5]

Anonymous — Thu, 23 Dec 2021 03:23:10 GMT

Hello,

Currently supported products are our priority. End-of-Life versions will be evaluated once we have provided remediation and/or mitigation for supported Talend products. To determine if a version is supported or has reached its end-of-life, please refer to Talend's Product support lifecycle https://www.talend.com/technical-support/support-statements/.

For more information, please take a look at this response Publication Date: December 22, 202:

https://www.talend.com/security/incident-response/

Best regards

Sabrina

Re: Log4j2 Vulnerability [Talend 6.5]

Anonymous — Fri, 31 Dec 2021 06:47:47 GMT

Hello,

The mitigation steps are now located on help.talend.com: https://document-link.us.cloud.talend.com/talend_log4j2_cve_statement?lang=en&version=latest&env=prd

Which provides all the workarounds for studio.

The mitigation steps that we have described in the Talend Help Center apply to TOS as well.

Best regards

Sabrina