R2025-04-RT (monthly release cumulative patch)

Introduction

This patch is cumulative. It includes the previous generally available patches from Talend ESB Runtime 8.0.1.R2025-02-RT.

NOTE:

• To download this patch, contact Talend Support.
• Keeping Studio and Talend Runtime versions in sync is highly recommended. Using unaligned versions is a risk.

Prerequisites

This patch must be installed on top of Talend ESB Runtime version 8.0.1.R2025-02-RT (Camel 4) or later. The installation on an older Talend ESB Runtime version will be rejected. More information about the installation of this version is available in the online documentation: https://help.talend.com/r/en-US/Cloud/installation-guide-linux/upgrading-runtime.

Installation

Depending on the product, {container} is Talend-ESB-V8.0.1.R2025-02-RT/container/ or Talend-Runtime-V8.0.1.R2025-02-RT/

For all inserted properties:

• if property already present (commented or uncommented), won't insert
• if property not already present, will backup related file in dir {container}/patches/Patch_20250425_R2025-04_v1-RT-8.0.1.R2025-02-RT/backup/ and insert property

For all updated properties:

• if property commented or not already present, won't update
• if property already present, will backup related file in dir {container}/patches/Patch_20250425_R2025-04_v1-RT-8.0.1.R2025-02-RT/backup/ and update property

If any change required, update value after patch execution.

Installation Steps

• Start Runtime Container
• Extract & replace the content of ZIP directory container into {container} directory

Structure after extract & replace should be :

{container}
├───bin     : existing dir
├───deploy  : existing dir
├───etc     : existing dir
├───...
├───patches : dir from current or previous patch
│   └───Patch_20250425_R2025-04_v1-RT-8.0.1.R2025-02-RT
│           patch.bat
│           patch01.commands
│           patch02.commands
│           patch03.commands
│           patch.sh
│           talend-esb-patch-<version>.jar
│           logs/ : directory for logs installation
├───system  : existing dir
│   ├───... : existing dir
├───...

• Ensure username/password are right in {container}/patches/Patch_20250425_R2025-04_v1-RT-8.0.1.R2025-02-RT/patch.bat or {container}/patches/Patch_20250425_R2025-04_v1-RT-8.0.1.R2025-02-RT/patch.sh

  ... -u {username} -p {password} -f patch.commands ... 
  

• Execute {container}/patches/Patch_20250425_R2025-04_v1-RT-8.0.1.R2025-02-RT/patch.bat or {container}/patches/Patch_20250425_R2025-04_v1-RT-8.0.1.R2025-02-RT/patch.sh

• Ensure directory {container}/patches/Patch_20250425_R2025-04_v1-RT-8.0.1.R2025-02-RT/logs contains new log files :
  • xxx-installation.log: patch installation log
  • xxx-init.log: state before patch installation
  • xxx-installed.log: state after patch installation

    Please note that Routes using cMap (TDM feature) are not automatically restarted by the patch procedure.
    You will need to restart the Runtime Container for changes to take effect.
    

Warning: JRE 17.0.8 may refuse to open JAR or other ZIP files from Talend ESB Runtime or the patch
installer. They complain about invalid CEN headers. This is caused by an incompatibility with JARs and other ZIP
files created by commonly used Apache tools. It has been fixed with 17.0.9, and you need to upgrade
your JRE to 17.0.9 or later.

Notes

Bundle resolution errors and patch process duration

The updates are performed in three iterations. During the first and second iteration bundle resolution errors are showing up on the console and in the logs. This is expected, and these errors are resolved in the third iteration. The total patch process takes several minutes and depends on the number and nature of patch updates, the deployments present in the Talend ESB Runtime, and the system's hardware. At the beginning of the second and third iterations, you'll see a log message providing a rough estimate of the remaining time to complete the patch: The patch process is roughly estimated to complete within {} minute(s).

R2025-04

Issues fixed in 2025-04

DPE

• DPE-772: Talend ESB runtime 8.0.1 Camel 4: Check latest Camel and Karaf versions for updates to backport.

TDM

• QTDM-489: Remove support for Database Representation (Phase 2)
• QTDM-93: Parser of the TDM expression language generates lot of errors

CVE fixed in 2025-04

CVE-2024-12369: wildfly-elytron 2.2.7.Final -> 2.2.10.Final CVE-2025-30065: parquet-avro 1.14.3 -> 1.15.1 CVE-2025-27427: artemis-server 2.37.0 -> 2.40.0 CVE-2025-30177: camel-undertow 4.8.1 -> 4.8.1.20250320 (backport of security fix from camel-undertow 4.8.6) CVE-2024-38821: servicemix spring-security 6.2.11 -> 6.2.71

R2025-03

Issues fixed in 2025-03

DPE

• DPE-818: Talend ESB runtime 8.0.1 Camel 4: Hardening of XACML registry resource identifiers provided via REST request
• DPE-852: Talend ESB 8.0.1 Camel 4 runtime: CVE-2025-27636: Backport fix to custom Camel 4.8.1
• DPE-873: Issue deploying Route with Camel azure-storage-queue in R2025-02-RT
• DPE-885: Talend ESB runtime 8.0.1 Camel 4: Update ActiveMQ to 6.1.6

TDM

• QTDM-121: [DSQL Map] Inconsistency between JSON and XML results on a decimal value
• QTDM-133: [DSQL Map] Avoid reporting the same error message twice
• QTDM-351: CSVSaxReader must accept root schema
• QTDM-382: Generate xsi namespace declaration no longer works for XML representation
• QTDM-375: The generated XML can be invalid when we use the option 'omit group map entry/key/value on output'
• QTDM-96: Remove support for JavaBean Representation (Phase 2)
• QTDM-450: COBOL Reader default choice strategy may hide Structure errors
• QTDM-413: [DSQL Map] Need functions getValueFromExternalMap and putValueToExternalMap
• QTDM-471: Update TDM maplang libraries to new version 1.14.0

CVE fixed in 2025-03

CVE-2025-27636, CVE-2025-29891: camel-support 4.8.1.20240820 -> 4.8.1.20250310 (backport of security fix from camel-support 4.8.5) CVE-2025-25247: felix-webconsole 5.0.8 -> 5.0.10 CVE-2025-2240: smallrye-fault-tolerance 6.4.0 -> 6.9.0

R2025-02

Issues fixed in 2025-02

DPE

• Upgrade to camel 4.8.1, java 17

TDM

• QTDM-85: TDM cMap component migration to Camel 4
• QTDM-257: Upgrade Hibernate to version depending on jakarta.xml.bind
• QTDM-255: Upgrade Saxon library to 12.5
• QTDM-285: Upgrade Saxon dependency from 9.9 to 12.5 in org.talend.transform.runtime.lib
• QTDM-290: Remove joda-time dependency from Database Representation
• QTDM-310: Add Map Group processing to XML Representation (output)
• QTDM-75: Add Map Group processing to XML Representation (input)
• QTDM-352: HashmapSaxReader must accept root schema
• QTDM-321: the value of odtEdiControl.txt is increasing when ISA13 is mapped
• QTDM-349: Hibernate version 6.x forces use of Java17. Move back to version 5
• QTDM-334: Format is wrong when show sample for map group structure and check 'omit group map entry/key/value on input'

For previous patches : see 2025-01 patch release notes