[
https://issues.apache.org/jira/browse/NIFI-16503?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Pierre Villard updated NIFI-16503:
----------------------------------
Fix Version/s: 2.13.0
Resolution: Fixed
Status: Resolved (was: Patch Available)
> Upgrade Brotli4j to 1.24.0
> --------------------------
>
> Key: NIFI-16503
> URL: https://issues.apache.org/jira/browse/NIFI-16503
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Extensions
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Major
> Fix For: 2.13.0
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> The Brotli4j library supports compression and decompression in
> {{CompressContent}} and {{ModifyCompression}} in the standard bundle of
> Processors.
> The library should be upgraded to
> [1.24.0|https://github.com/hyperxpro/Brotli4j/releases/tag/v1.24.0] to
> mitigate
> [CVE-2026-111497|https://github.com/hyperxpro/Brotli4j/security/advisories/GHSA-x524-jrqf-vwq6]
> related to potential buffer overflow during decode operations.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
