Patching and Updates for TOS 7.3.1

[dave_barnett]

Hello folks

We have been using TOS 7.3.1 for some time and I am looking at log4j vulnerabilities. It would appear there are fixes (patches) for both the Studio and Runtime. Can you please tell me how I can download them ? The link in settings > software updates /tos/7.3.1 does not appear to be valid.

Again we are using the TOS with no subscription.

Many thanks

Dave Barnett

[Anonymous]

Hello,

As Talend 7.3.1 and 8 version was released prior to the vulnerability being revealed, so the Open Studio version does not have the fixes built-in.

I’m afraid we do not supply patches for the Open Studio releases. We only provide patches for our subscription products.

Here is a related topic about:

https://community.talend.com/s/question/0D55b00006yu3sCCAQ/remove-default-log4j-version-and-add-a-ne...

Feel free to let us know if it helps for you.

Best regards

Sabrina

[dave_barnett]

Hi Sabrina,

If I had a subscription would I be able to patch my TOS environments too ? Or do the patches you supply only work on Enterprise deployments ?

[Anonymous]

Hello,

You have to apply patches for your subscription solution not open source.

Best regards

Sabrina