TOSDI 8.0.1, Log4j and CVE-2021-44228

[guybrush]

Hi,

I'm using Talend Open Studio (non-subscription) and want to completely remove vulnerable versions of log4j, and replace them with their current versions. How do I upgrade talend or log4j so that there is no trace left of any vulnerable versions?

Thanks!

[Anonymous]

For your use case, you could install the module externally from maven repository.

1.Download the jar from https://mvnrepository.com/artifact/org.apache.logging.log4j

2.select the appropriate jar which needs to be upgraded

3.select the module in TOS

 4.Click Detect and install module

Let us know if you can see the latest jar exist when you build the job.

Hope this will help.

Best regards

Sabrina