[NIFI-11359] Upgrade Woodstox to 6.5.0 for Solr - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Minor
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 2.0.0-M1, 1.21.0
Component/s: Extensions
Labels:
- dependency-upgrade

Description

SolrJ 8.11.1 depends on Woodstox 6.2.4 for XML parsing. Woodstox should be upgraded to 6.5.0 to mitigate CVE-2022-40152, related to potential resource exhaustion when DTD parsing is enabled.

Attachments

Issue Links

links to

GitHub Pull Request #7099

Activity

People

Assignee:: David Handermann

Reporter:: David Handermann

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 29/Mar/23 14:07

Updated:: 29/Mar/23 15:34

Resolved:: 29/Mar/23 15:34

Time Tracking

Estimated:

Not Specified

Remaining:

Logged:

0.5h