Sivaprasanna Sethuraman created NIFI-5286:
---------------------------------------------
Summary: Update FasterXML Jackson version to 2.9.5
Key: NIFI-5286
URL: https://issues.apache.org/jira/browse/NIFI-5286
Project: Apache NiFi
Issue Type: Improvement
Components: Core Framework, Extensions
Affects Versions: 1.6.0, 1.5.0, 1.4.0, 1.3.0
Reporter: Sivaprasanna Sethuraman
Assignee: Sivaprasanna Sethuraman
The current version of FasterXML Jackson-databind used is 2.9.4 which was
supposed to fix several critical vulnerabilities but wasn't completely
addressed. A fix to address them was introduced in 2.9.5.
More details about the vulnerability can be found at :
https://nvd.nist.gov/vuln/detail/CVE-2018-7489
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
