[
https://issues.apache.org/jira/browse/NIFI-8986?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17392315#comment-17392315
]
ASF subversion and git services commented on NIFI-8986:
-------------------------------------------------------
Commit d93e9f152cad2f7f40c026604ff62fd7f0ba1c55 in nifi's branch
refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=d93e9f1 ]
NIFI-8986 Upgraded Commons Compress to 1.21
- Upgraded direct and transitive dependencies from 1.20 and earlier to 1.21
Signed-off-by: Pierre Villard <[email protected]>
This closes #5273.
> Upgrade Apache Commons Compress to 1.21
> ---------------------------------------
>
> Key: NIFI-8986
> URL: https://issues.apache.org/jira/browse/NIFI-8986
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Core Framework, Extensions, MiNiFi, NiFi Registry
> Affects Versions: 1.14.0, 1.15.0
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Major
> Labels: security
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
> Apache Commons Compress 1.21 addresses
> [CVE-2021-36090|https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-36090]
> related to memory consumption when reading crafted Zip archives.
>
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
