You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by "Sivaprasanna Sethuraman (JIRA)" <ji...@apache.org> on 2018/06/09 04:42:00 UTC

[jira] [Created] (NIFI-5286) Update FasterXML Jackson version to 2.9.5

Sivaprasanna Sethuraman created NIFI-5286:
---------------------------------------------

             Summary: Update FasterXML Jackson version to 2.9.5
                 Key: NIFI-5286
                 URL: https://issues.apache.org/jira/browse/NIFI-5286
             Project: Apache NiFi
          Issue Type: Improvement
          Components: Core Framework, Extensions
    Affects Versions: 1.6.0, 1.5.0, 1.4.0, 1.3.0
            Reporter: Sivaprasanna Sethuraman
            Assignee: Sivaprasanna Sethuraman


The current version of FasterXML Jackson-databind used is 2.9.4 which was supposed to fix several critical vulnerabilities but wasn't completely addressed. A fix to address them was introduced in 2.9.5.

More details about the vulnerability can be found at : https://nvd.nist.gov/vuln/detail/CVE-2018-7489

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)