[NIFI-12316] Upgrade MySQL Connector J to 8.2.0 - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Minor
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 2.0.0-M1, 1.24.0
Component/s: NiFi Registry
Labels:
None

Description

MySQL Connector J versions prior to 8.2.0 are vulnerable to a complex attack described in CVE-2023-22102 related to connection manipulation. This is not a runtime dependency, but should be upgraded as a test dependency of NiFi Registry.

Attachments

Issue Links

links to

GitHub Pull Request #7979

Activity

People

Assignee:: David Handermann

Reporter:: David Handermann

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 03/Nov/23 18:17

Updated:: 04/Nov/23 06:55

Resolved:: 04/Nov/23 06:55

Time Tracking

Estimated:

Not Specified

Remaining:

Logged:

20m