[ 
https://issues.apache.org/jira/browse/NIFI-14010?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17898389#comment-17898389
 ] 

ASF subversion and git services commented on NIFI-14010:
--------------------------------------------------------

Commit 31e4c3728a0c1a25a43cbdfed95812a7e6491615 in nifi's branch 
refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=31e4c3728a ]

NIFI-14010 Upgraded Netty to 4.1.115 and Bouncy Castle to 1.79

Signed-off-by: Pierre Villard <[email protected]>

This closes #9524.


> Upgrade Netty to 4.1.115 and Bouncy Castle to 1.79
> --------------------------------------------------
>
>                 Key: NIFI-14010
>                 URL: https://issues.apache.org/jira/browse/NIFI-14010
>             Project: Apache NiFi
>          Issue Type: Improvement
>            Reporter: David Handermann
>            Assignee: David Handermann
>            Priority: Minor
>             Fix For: 2.1.0
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Netty libraries should be upgraded to version 
> [4.1.115|https://netty.io/news/2024/11/12/4-1-115-Final.html] in order to 
> mitigate CVE-2024-47535, which relates to manipulation of a specific file 
> when running on Windows.
> Bouncy Castle dependencies should be upgraded to 
> [1.79|https://www.bouncycastle.org/download/bouncy-castle-java/?filter=java%3Drelease-1-79]
>  in order to incorporate bug fixes and features.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to