Log4j2 Vulnerability [Talend 6.5]

[wissem1]

Hello,

there is a patch for Talend 6.5 for Log4j2 Vulnerability ?

the JAR to patch is

pax-logging-log4j2-1.10.1-TESB.jar

Best Regard

Wissem

[Anonymous]

Hello,

Currently supported products are our priority. End-of-Life versions will be evaluated once we have provided remediation and/or mitigation for supported Talend products. To determine if a version is supported or has reached its end-of-life, please refer to Talend's Product support lifecycle https://www.talend.com/technical-support/support-statements/.

For more information, please take a look at this response Publication Date: December 22, 202:

https://www.talend.com/security/incident-response/

Best regards

Sabrina

[Anonymous]

Hello,

The mitigation steps are now located on help.talend.com: https://document-link.us.cloud.talend.com/talend_log4j2_cve_statement?lang=en&version=latest&env=prd 

Which provides all the workarounds for studio.

The mitigation steps that we have described in the Talend Help Center apply to TOS as well.

Best regards

Sabrina