Hello everyone!
This is Nicolas and I am working as Big Data consultant.
We currently have StreamSets/ DC in 3.22 version installed through Cloudera Manager.
During monthly vulnerability scans, report informed us that many files in StreamSets/DC paths are susceptible to the vulnerability of log4j.
Example: STREAMSETS_DATACOLLECTOR-3.22.3/streamsets-libs/streamsets-datacollector-cdh_6_3-lib/lib/log4j-core-2.8.2.jar
I reviewed your StreamSets documentation, but I cannot find free parcel in version 4+ and above of SS/DC. In your repo also newer versions are not visible.
Maybe new versions of parcels are available, but it is quite possible that I was looking in the wrong place.
Maybe someone knows the solution to a given problem?
Basically the goal is to fix the vulnerabilities existing in these paths, the SS/DC version is not the most important.
Thanks! :)
Nicolas