David Handermann created NIFI-14010:
---------------------------------------
Summary: Upgrade Netty to 4.1.115 and Bouncy Castle to 1.79
Key: NIFI-14010
URL: https://issues.apache.org/jira/browse/NIFI-14010
Project: Apache NiFi
Issue Type: Improvement
Reporter: David Handermann
Assignee: David Handermann
Fix For: 2.1.0
Netty libraries should be upgraded to version
[4.1.115|https://netty.io/news/2024/11/12/4-1-115-Final.html] in order to
mitigate CVE-2024-47535, which relates to manipulation of a specific file when
running on Windows.
Bouncy Castle dependencies should be upgraded to
[1.79|https://www.bouncycastle.org/download/bouncy-castle-java/?filter=java%3Drelease-1-79]
in order to incorporate bug fixes and features.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
