TPS-5511

Introduction

This is a self-contained patch.

NOTE: For information on how to obtain this patch, reach out to your Support contact at Talend.

This patch contains the following fixes:

TDI-46850 Upgrade ActiveMQ Jars (5.16.3)
TDI-46932 tSAPInput component parses TIMS Midnight as null when using dynamic schema
TDI-47241 CVE: log4j-api(core)-[2 - 2.15.0)
TDI-47325 Cannot create data source(SAP BW version 7.5)
TDI-47633 CVE: Replace log4j1.x by reload4j or upgrade to log4j2
TDI-47763 Assess Spring4Shell vulnerability
TDI-47861 CVE: tomcat-embed-core 9.0.30 have risk
TDI-47869 Authentication Bypass in Talend/tsap-rfc-server
TDI-47573 SAP RFC Server shouldn't be required when feature mode is mock
TDI-48107 CVE: gson-2.8.0.jar
TDI-48174 [CVE] : upgrade kafka-clients to 2.8.1
TDI-48471 Denial Of Service (DoS) in Talend/cloud-components (master)--snakeyaml 1.32
TDI-48726 Spring-beans: Denial Of Service (DoS) in Talend/tsap-rfc-server (master)---spring 5.3.23
TDI-48715 CVE-2022-42003,CVE-2022-42004, jackson-databind-2.13.2.2jar
TDI-48873 Upgrade slf4j to 1.7.34
TDI-48818 Kafka: Denial Of Service (DoS) in Talend/tsap-rfc-server, sap-api and cloud-components
TDI-48821 Apache common codec and Apache http client in Talend/talend-sap-api (master)
TDI-49303 Premium Data,commons-net:commons-net:(2.2,3.3,3.6,3.8.0)
TDI-49797 Access Restriction Bypass in Talend/tsap-rfc-server (master):org.springframework.boot:spring-boot-actuator-autoconfigure

Consider the following requirements for your system:

Talend SAP RFC Server 8.0.1 must be installed. and work with Talend Studio 8.0.1 with patch "R2021-12" or newer

Stop the Talend SAP RFC Server
Extract the zip.
Overwrite the {sap rfc server home}/tsap-rfc-server-8.0.1.jar
Adjust the new configuration in {sap rfc server home}/conf/tsap-rfc-server.properties, please refer to README.md file in the patch root folder.
Restart the Talend SAP RFC Server

If you find any issues with this page or its content – a typo, a missing step, or a technical error – please let us know!