Log4j-core*.jar File

[Miguel_Neto]

Hello,

I'm using TOS 8.0 for Data Integration. Regarding all vulnerabilities present on log4j-core files, my enterprise anti-virus dont let me have on laptop jar's files of this versions anymore. So, how can I replace this jar files on TOS 8.0 in order to compile and run all jobs. I tried to replace the jar file on external modules, but without success.

Thanks in advance.

[Anonymous]

Hello

We received information about log4j issues from R&D as below:

We’re working on updating the TOS with the Log4j fix. Meanwhile the mitigation steps that we have described in the Talend Help Center apply to TOS as well.

BTW, about the compilation error, I have replied you in your another question.

Regards

Shong

[Miguel_Neto]

Dear Shong,

I follow all steps described in Talend Help Center in order to fix the reported problem. However every time i run the job, TOS ask me to install log4j-core-2.13.2.jar (image below) but I can't do that. If i close de windows without install the build report the following error: Error: Could not find or load main class

Can you help me to solve it? 

[Anonymous]

Hi Miguel

I am not sure whether the job still need log4j-core jar to compile the code even though you disable the log4j option, I need to check with our R&D team.

Regards

Shong

[Miguel_Neto]

Dear Song,

Thanks by the answer. Please check with R&D team and let me know what I have to do to solve it.

[Miguel_Neto]

Dear Song,

Any news about this issue?

Cheers and Happy new year.

[Miguel_Neto]

Dear Shong,

There is new about it?

Best regards,

Miguel