[
https://issues.apache.org/jira/browse/NIFI-10804?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Pierre Villard updated NIFI-10804:
----------------------------------
Assignee: Pierre Villard
Status: Patch Available (was: Open)
> Update okhttp-digest to version 2.7
> -----------------------------------
>
> Key: NIFI-10804
> URL: https://issues.apache.org/jira/browse/NIFI-10804
> Project: Apache NiFi
> Issue Type: Improvement
> Affects Versions: 1.18.0
> Reporter: Mike R
> Assignee: Pierre Villard
> Priority: Minor
>
> The version of okhttp-digest used in the NiFi lookup services is outdated and
> should be updated to remediate
> [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15250]
> The current version used there is 2.5, with the most recent version being
> 2.7. Release notes
> https://github.com/rburgst/okhttp-digest/blob/2.7/release-notes.md
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
