You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2021/05/21 15:52:00 UTC

[jira] [Commented] (NIFI-8604) Upgrade Apache Accumulo to 2.0.1

    [ https://issues.apache.org/jira/browse/NIFI-8604?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17349348#comment-17349348 ] 

ASF subversion and git services commented on NIFI-8604:
-------------------------------------------------------

Commit 1c17da562bcf581af93a22577067c26fe2c7444d in nifi's branch refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=1c17da5 ]

NIFI-8604 Upgraded Apache Accumulo to 2.0.1

Signed-off-by: Nathan Gough <th...@gmail.com>

This closes #5077.


> Upgrade Apache Accumulo to 2.0.1
> --------------------------------
>
>                 Key: NIFI-8604
>                 URL: https://issues.apache.org/jira/browse/NIFI-8604
>             Project: Apache NiFi
>          Issue Type: Improvement
>    Affects Versions: 1.13.2
>            Reporter: David Handermann
>            Assignee: David Handermann
>            Priority: Minor
>              Labels: dependency-upgrade
>          Time Spent: 1h 40m
>  Remaining Estimate: 0h
>
> Apache Accumulo server 2.0.0 is impacted by [CVE-2020-17533|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17533], which was resolved in version 2.0.1.  Although the vulnerability does not impact NiFi client code, upgrading from version 2.0.0 maintains version parity with Accumulo server and avoids false positives in the OWASP Dependency Check Report.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)