[jira] [Commented] (NIFI-10190) Update azure-cosmos from 4.26.0 to 4.31.0

2022-07-01 Thread Mike R (Jira)


[ 
https://issues.apache.org/jira/browse/NIFI-10190?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17561441#comment-17561441
 ] 

Mike R commented on NIFI-10190:
---

Will wait until the CVE is updated before updating this.

> Update azure-cosmos from 4.26.0 to 4.31.0
> -
>
> Key: NIFI-10190
> URL: https://issues.apache.org/jira/browse/NIFI-10190
> Project: Apache NiFi
>  Issue Type: Improvement
>Affects Versions: 1.16.1, 1.16.2, 1.16.3
>Reporter: Mike R
>Priority: Major
>  Time Spent: 50m
>  Remaining Estimate: 0h
>
> Update azure-cosmos component from 4.26.0 to 4.31.0 to remediate 
> CVE-2020-36518



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (NIFI-10190) Update azure-cosmos from 4.26.0 to 4.31.0

2022-07-01 Thread Mike R (Jira)


[ 
https://issues.apache.org/jira/browse/NIFI-10190?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17561440#comment-17561440
 ] 

Mike R commented on NIFI-10190:
---

Even with the update, it is still vulnerable to 
[CVE-2020-8908|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8908]. 
So maybe wait until that is resolved in the Azure links, then go from there.

> Update azure-cosmos from 4.26.0 to 4.31.0
> -
>
> Key: NIFI-10190
> URL: https://issues.apache.org/jira/browse/NIFI-10190
> Project: Apache NiFi
>  Issue Type: Improvement
>Affects Versions: 1.16.1, 1.16.2, 1.16.3
>Reporter: Mike R
>Priority: Major
>  Time Spent: 40m
>  Remaining Estimate: 0h
>
> Update azure-cosmos component from 4.26.0 to 4.31.0 to remediate 
> CVE-2020-36518



--
This message was sent by Atlassian Jira
(v8.20.10#820010)