Notable fixes and Known issues in Talend Remote Engine R2024-07

Security enhancements

Issue	Description
TMC-27634	The following security dependencies have been upgraded: Apache CXF: 3.6.2 to 3.6.3 CVE-2024-28752 - SSRF vulnerability using the Aegis DataBinding in Apache CXF Spring Web: 6.1.4 to 6.1.8 CVE-2024-22259 - Server Side Request Forgery (SSRF) Spring Web: 6.1.5 to 6.1.8 CVE-2024-22262 - Open Redirect Apache Commons Configuration 2: 2.9.0 to 2.10.1 CVE-2024-29133 - Out-of-Bounds Write CVE-2024-29131 - Out-of-Bounds Write Bouncy Castle Provider: 1.77 to 1.78.1 CVE-2024-30172 - Denial Of Service (DoS) CVE-2024-30171 - Observable Discrepancy CVE-2024-29857 - Denial Of Service (DoS) Apache Karaf: 4.4.5 to 4.4.6 Apache ActiveMQ client: 5.18.3 to 5.18.4 Apache Camel: 3.22.1 to 3.22.2 Apache Commons Codecs: 1.16.1 to 1.17.0 Apache Commons Compress: 1.26.0 to 1.26.2 Apache Commons IO: 2.15.1 to 2.16.1 Apache Commons Text: 1.11.0 to 1.12.0 Google Guava: 33.0.0-jre to 33.2.1-jre GSON: 2.10.1 to 2.11.0 Jackson: 2.16.1 to 2.17.1 OSHI: 6.4.13 to 6.6.1 picocli: 4.7.5 to 4.7.6

Issue

Description

TMC-27634

The following security dependencies have been upgraded:

Apache CXF: 3.6.2 to 3.6.3
- CVE-2024-28752 - SSRF vulnerability using the Aegis DataBinding in Apache CXF
Spring Web: 6.1.4 to 6.1.8
- CVE-2024-22259 - Server Side Request Forgery (SSRF)
Spring Web: 6.1.5 to 6.1.8
- CVE-2024-22262 - Open Redirect
Apache Commons Configuration 2: 2.9.0 to 2.10.1
- CVE-2024-29133 - Out-of-Bounds Write
- CVE-2024-29131 - Out-of-Bounds Write
Bouncy Castle Provider: 1.77 to 1.78.1
- CVE-2024-30172 - Denial Of Service (DoS)
- CVE-2024-30171 - Observable Discrepancy
- CVE-2024-29857 - Denial Of Service (DoS)
Apache Karaf: 4.4.5 to 4.4.6
Apache ActiveMQ client: 5.18.3 to 5.18.4
Apache Camel: 3.22.1 to 3.22.2
Apache Commons Codecs: 1.16.1 to 1.17.0
Apache Commons Compress: 1.26.0 to 1.26.2
Apache Commons IO: 2.15.1 to 2.16.1
Apache Commons Text: 1.11.0 to 1.12.0
Google Guava: 33.0.0-jre to 33.2.1-jre
GSON: 2.10.1 to 2.11.0
Jackson: 2.16.1 to 2.17.1
OSHI: 6.4.13 to 6.6.1
picocli: 4.7.5 to 4.7.6

Issue	Description
APPINT-36482	This ticket resolves an issue where a Route with cTalendJob invoking tPGPDecrypt fails during deployment in Talend Management Console.
TPRUN-7022	OSGI artifacts were not being deleted during undeployments or failed deployments from the ${karaf.data}/dsrunner/exec/osgi directory. This issue has been fixed.
TMC-27633	Previously, an exception was not thrown because the return value of java.lang.Exception.getCause() was null. This problem has been addressed and corrected.
TMC-27068	This ticket fixes a phase switch issue logged with the following message: `java.lang.IllegalArgumentException: Cannot switch from phase EXECUTING to DEPLOYING`
TMC-27658	An issue where a task was executed twice in Talend Management Console has been resolved.

If you find any issues with this page or its content – a typo, a missing step, or a technical error – please let us know!