[
https://issues.apache.org/jira/browse/NIFI-16503?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
David Handermann updated NIFI-16503:
------------------------------------
Description:
The Brotli4j library supports compression and decompression in
{{CompressContent}} and {{ModifyCompression}} in the standard bundle of
Processors.
The library should be upgraded to
[1.24.0|https://github.com/hyperxpro/Brotli4j/releases/tag/v1.24.0] to mitigate
[CVE-2026-111497|https://github.com/hyperxpro/Brotli4j/security/advisories/GHSA-x524-jrqf-vwq6]
related to potential buffer overflow during decode operations.
was:
The Brotli4j library supports compression and decompression in
{{CompressContent}} and {{ModifyContentCompression}} in the standard bundle of
Processors.
The library should be upgraded to
[1.24.0|https://github.com/hyperxpro/Brotli4j/releases/tag/v1.24.0] to mitigate
[CVE-2026-111497|https://github.com/hyperxpro/Brotli4j/security/advisories/GHSA-x524-jrqf-vwq6]
related to potential buffer overflow during decode operations.
> Upgrade Brotli4j to 1.24.0
> --------------------------
>
> Key: NIFI-16503
> URL: https://issues.apache.org/jira/browse/NIFI-16503
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Extensions
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Major
> Time Spent: 10m
> Remaining Estimate: 0h
>
> The Brotli4j library supports compression and decompression in
> {{CompressContent}} and {{ModifyCompression}} in the standard bundle of
> Processors.
> The library should be upgraded to
> [1.24.0|https://github.com/hyperxpro/Brotli4j/releases/tag/v1.24.0] to
> mitigate
> [CVE-2026-111497|https://github.com/hyperxpro/Brotli4j/security/advisories/GHSA-x524-jrqf-vwq6]
> related to potential buffer overflow during decode operations.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
