David Handermann created NIFI-13935:
---------------------------------------

             Summary: Remove HBase Processors and Services
                 Key: NIFI-13935
                 URL: https://issues.apache.org/jira/browse/NIFI-13935
             Project: Apache NiFi
          Issue Type: Improvement
          Components: Extensions
            Reporter: David Handermann
            Assignee: David Handermann


Apache HBase 2 has a direct dependency on Protobuf Java 2.5.0, which has 
multiple known vulnerabilities related to potential resource exhaustion. [HBase 
Protobuf 
documentation|https://github.com/apache/hbase/blob/1e0884da4bdab6ba231333f55374df02200d1101/src/main/asciidoc/_chapters/protobuf.adoc]
 describes changes to Protobuf dependencies for HBase 3, although HBase 3 is 
still in beta at the time of this writing. Existing NiFi integration with HBase 
2 should be removed from the main branch to eliminate vulnerabilities 
associated with Protobuf Java 2.5.0. Direct support for HBase could be 
revisited with new versions of HBase.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to