# Talend JobServer

This release provides security and execution stability improvements for Talend JobServer, including a Log4j vulnerability remediation.

## Notable fixes

| Issue | Description |
| --- | --- |
| DPE-2367, DPE-2925 | Updated the embedded Log4j dependencies in Talend JobServer<br>to v2.25.4 to address the CVE-2025-68161 and CVE-2026-34480 security<br>vulnerabilities. |
| DPE-2347, DPE-2365 | Hardened Talend JobServer security by preventing unauthenticated JMX stop operations and improving the<br>security of serialization and deserialization handling. |
| DPE-2604, DPE-2701 | Fixed Job start and deployment failures caused by insufficient<br>synchronization between cleanup, upload, and deployment operations. |
| DPE-1733, DPE-2680 | Improved Job and Job execution state validation, including how<br>Talend JobServer handles the configured maximum number of Jobs during cleanup. |
| DPE-2729 | Improved Java runtime selection during Job executions by respecting the<br>minimum Java version provided with the artifacts before falling back to other<br>detection strategies. |
| DPE-2560 | Fixed an issue where Talend JobServer<br>may appear offline in Talend Administration Center<br>when the monitoring port was enabled. |

For more details about these changes and other updates, see [TPS-6024 patch notes](https://help.qlik.com/talend/en-US/patch-notes/8.0/tps-6024).