You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by "David Handermann (Jira)" <ji...@apache.org> on 2024/09/19 20:04:00 UTC

[jira] [Created] (NIFI-13768) Upgrade protobuf to 3.25.5

David Handermann created NIFI-13768:
---------------------------------------

             Summary: Upgrade protobuf to 3.25.5
                 Key: NIFI-13768
                 URL: https://issues.apache.org/jira/browse/NIFI-13768
             Project: Apache NiFi
          Issue Type: Improvement
          Components: Extensions
            Reporter: David Handermann
            Assignee: David Handermann
             Fix For: 2.0.0-M5


Protobuf dependencies in OpenTelemetry and Protobuf Reader extensions should be upgrade to 3.25.5 to resolve CVE-2024-7254 related to parsing crafted binary fields resulting in a StackOverflow.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)