[
https://issues.apache.org/jira/browse/NIFI-16503?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18132294#comment-18132294
]
ASF subversion and git services commented on NIFI-16503:
--------------------------------------------------------
Commit 84aaefd9465c36cccac27e5ab522178eb06bcece in nifi's branch
refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=84aaefd9465 ]
NIFI-16503 Upgraded Brotli4j from 1.23.0 to 1.24.0 (#11845)
- Removed notice references to Brotli4j where the library is not bundled
> Upgrade Brotli4j to 1.24.0
> --------------------------
>
> Key: NIFI-16503
> URL: https://issues.apache.org/jira/browse/NIFI-16503
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Extensions
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Major
> Time Spent: 20m
> Remaining Estimate: 0h
>
> The Brotli4j library supports compression and decompression in
> {{CompressContent}} and {{ModifyCompression}} in the standard bundle of
> Processors.
> The library should be upgraded to
> [1.24.0|https://github.com/hyperxpro/Brotli4j/releases/tag/v1.24.0] to
> mitigate
> [CVE-2026-111497|https://github.com/hyperxpro/Brotli4j/security/advisories/GHSA-x524-jrqf-vwq6]
> related to potential buffer overflow during decode operations.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
