We are currently using Talend Big Data 7.1.1.20181026_1147. Our IT security has flagged the jar log4j-1.2.17.jar as having security vulnerabilities, and they want us to update it.
The question is, how do you update Talend to use new versions of Jar files? Do we have to update the entire version of Talend to accomplish this, or can we point the modules to use a new version of the jar? We've tried a tlibraryload, however this comes with the side consequence of any time we build a job, we have to manually go into the lib directory and remove the old version of the jar, and remove references to it from the bat file (so scans don't see even a hint of the file name).
Is there some way to just have the module reference an updated jar in Talend itself without additional in-job activities?
