topic Re: Patching and Updates for TOS 7.3.1 in Installing and Upgrading

Patching and Updates for TOS 7.3.1

dave_barnett — Fri, 15 Nov 2024 21:41:32 GMT

Hello folks

We have been using TOS 7.3.1 for some time and I am looking at log4j vulnerabilities. It would appear there are fixes (patches) for both the Studio and Runtime. Can you please tell me how I can download them ? The link in settings > software updates /tos/7.3.1 does not appear to be valid.

Again we are using the TOS with no subscription.

Many thanks

Dave Barnett

Re: Patching and Updates for TOS 7.3.1

Anonymous — Tue, 13 Jun 2023 02:42:16 GMT

Hello,

As Talend 7.3.1 and 8 version was released prior to the vulnerability being revealed, so the Open Studio version does not have the fixes built-in.

I’m afraid we do not supply patches for the Open Studio releases. We only provide patches for our subscription products.

Here is a related topic about:

https://community.talend.com/s/question/0D55b00006yu3sCCAQ/remove-default-log4j-version-and-add-a-new-version-globally

Feel free to let us know if it helps for you.

Best regards

Sabrina

Re: Patching and Updates for TOS 7.3.1

dave_barnett — Tue, 13 Jun 2023 07:38:28 GMT

Hi Sabrina,

If I had a subscription would I be able to patch my TOS environments too ? Or do the patches you supply only work on Enterprise deployments ?

Re: Patching and Updates for TOS 7.3.1

Anonymous — Wed, 14 Jun 2023 06:02:27 GMT

Hello,

You have to apply patches for your subscription solution not open source.

Best regards

Sabrina