Where to find and how to apply hotfix for Apache Log4J Vulnerabilities in Spotfire Server 10.9

[David Baltar Boilève]

Hi, I need to find the hotfix for Apache Log4J Vulnerabilities in Spotfire Server 10.9.

 

I can't find that hotfix and I need to know how to apply it. Is it like applyingpackages (.spk, .sdn)

 

Thanks!

[Fredrik Rosell]

Hello,

 

There is no service pack/hotfix for version 10.9 specifically (there are service packsfor 10.10 LTS, 11.4. LTS and 11.6 available on the TIBCO eDelivery site - https://edelivery.tibco.com) but for all affected versions (7.9 and higher), there are mitigation instructions available.

Please refer to to TIBCO Knowledge Base article TIBCO Spotfire Resolution and Mitigation for Apache Log4J Vulnerabilities (Log4Shell) - https://support.tibco.com/s/article/TIBCO-Spotfire-Mitigation-for-CVE-2021-44228-Log4Shell

For general TIBCO information on this topic, please refer to Apache Log4J Vulnerability Daily Update - https://www.tibco.com/support/notices/2021/12/apache-log4j-vulnerability-update

 

Best Regards

Fredrik Rosell (TIBCO)