[
https://issues.apache.org/jira/browse/NIFI-4297?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16126551#comment-16126551
]
ASF GitHub Bot commented on NIFI-4297:
--------------------------------------
Github user alopresto commented on the issue:
https://github.com/apache/nifi/pull/2084
I [published the
results](https://gist.github.com/alopresto/df899c1e379fe48d830663313cf34db4) of
`mvn dependency:tree` on my local machine, and the reviewer can verify that the
only instances of `jackson-core` < 2.8.6 are:
* `nifi-gcp-processors - google-http-client-jackson2 - 2.1.3`
* `nifi-gcp-nar - google-http-client-jackson2 - 2.1.3`
* `nifi-spark-receiver - com.fasterxml.jackson.core.jackson-databind -
2.6.5`
by using the regex `jackson-core:jar:2.[^8]`.
All unit tests pass.
> Immediately actionable dependency upgrades
> ------------------------------------------
>
> Key: NIFI-4297
> URL: https://issues.apache.org/jira/browse/NIFI-4297
> Project: Apache NiFi
> Issue Type: Sub-task
> Components: Extensions
> Affects Versions: 1.3.0
> Reporter: Andy LoPresto
> Assignee: Andy LoPresto
> Labels: dependencies, security
>
> The immediately actionable items are:
> * {{org.apache.logging.log4j:log4j-core}} in {{nifi-storm-spout}} 2.1 -> 2.8.2
> * {{org.apache.poi:poi}} in {{nifi-email-processors}} 3.14 -> 3.15
> * {{org.apache.logging.log4j:log4j-core}} in
> {{nifi-elasticsearch-5-processors}} 2.7 -> 2.8.2
> * {{org.springframework:spring-web}} in {{nifi-jetty}} 4.2.4.RELEASE ->
> 4.3.10.RELEASE
> * {{org.springframework:spring-web}} in {{nifi-jetty}} 4.2.4.RELEASE ->
> 4.3.10.RELEASE
> * {{org.apache.derby:derby}} in {{nifi-kite-processors}} 10.11.1.1 ->
> 10.12.1.1 (already excluded)
> * {{com.fasterxml.jackson.core:jackson-core}} in {{nifi-azure-processors}}
> 2.6.0 -> 2.8.6
> * {{com.fasterxml.jackson.core:jackson-core}} in {{nifi-expression-language}}
> 2.6.1 -> 2.8.6
> * {{com.fasterxml.jackson.core:jackson-core}} in {{nifi-standard-utils}}
> 2.6.2 -> 2.8.6
> * {{com.fasterxml.jackson.core:jackson-core}} in {{nifi-hwx-schema-registry}}
> 2.7.3 -> 2.8.6
> * {{com.fasterxml.jackson.core:jackson-core}} in {{nifi-solr-processors}}
> 2.5.4 -> 2.8.6
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
