You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by "David Handermann (Jira)" <ji...@apache.org> on 2022/05/04 12:45:00 UTC

[jira] [Updated] (NIFI-9986) Upgrade Commons Configuration 2 for Accumulo

     [ https://issues.apache.org/jira/browse/NIFI-9986?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Handermann updated NIFI-9986:
-----------------------------------
    Summary: Upgrade Commons Configuration 2 for Accumulo  (was: Upgraded Commons Configuration 2 for Accumulo)

> Upgrade Commons Configuration 2 for Accumulo
> --------------------------------------------
>
>                 Key: NIFI-9986
>                 URL: https://issues.apache.org/jira/browse/NIFI-9986
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Extensions
>            Reporter: David Handermann
>            Assignee: David Handermann
>            Priority: Minor
>              Labels: dependency-upgrade
>
> Components in the {{nifi-accumulo-bundle}} have a transitive dependency on Apache Commons Configuration 2 version 2.5, which has a vulnerability associated with YAML parsing. Although this vulnerability does not appear to impact Accumulo usage of the library, Commons Configuration 2 should be upgraded to 2.7.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)