Log4j remediation for Talend Open Source products

[MDimsey]

Hello,

I'm currently working on remediating what instances my organization has for Talend Open Source (TOS) products related to Log4j.

However, to my understanding Talend doesn't have any patches for these products as TOS is "out of scope." I contacted Talend Support for some guidance and they just directed me here to get some help.

Is anyone familiar with the remediation steps for these products? I've seen in some cases that maybe the only solution is migrating over to an enterprise version of Talend Studio.

Some products we're looking to have remediated include:

TOS_BD 7.3.1

TOS_BD 7.1.1

TOS_DI 7.3.1

TOS_DI 6.4.0

Any assistance is appreciated. Thank you.

[Anonymous · Accepted solution]

Hello,

All currently supported products of Talend have been patched for the Log4j issues. You can see this here....

https://www.talend.com/security/incident-response/

Talend Help Center documentation:

https://help.talend.com/r/EeTpT8r7xmeq1HtTGQBqGA/zX7iWLX6GgxOAjJPlpXNYA

please raise a ticket on Talend Support Portal, support team will provide the instructions to you and help you out.

The Talend Open Studio products will not be patched, but the next version released will be updated to sort this issue. We don't have any dates for new versions as yet.

Best regards

Sabrina