[jira] [Commented] (NIFI-9474) Upgrade Log4j 2 to 2.15.0

2021-12-30 Thread Mike Oakes (Jira)
[ https://issues.apache.org/jira/browse/NIFI-9474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17466880#comment-17466880 ] Mike Oakes commented on NIFI-9474: -- Thank you [~joewitt]  > Upgrade Log4j 2 to 2.15.0 >

[jira] [Commented] (NIFI-9474) Upgrade Log4j 2 to 2.15.0

2021-12-22 Thread Joe Witt (Jira)
[ https://issues.apache.org/jira/browse/NIFI-9474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17464159#comment-17464159 ] Joe Witt commented on NIFI-9474: Same answer as before. But we released Apache NiFi 1.15.2 minutes ago

[jira] [Commented] (NIFI-9474) Upgrade Log4j 2 to 2.15.0

2021-12-22 Thread Wesley Philip (Jira)
[ https://issues.apache.org/jira/browse/NIFI-9474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17464156#comment-17464156 ] Wesley Philip commented on NIFI-9474: - Is Nifi 1.15.1 affected by  CVE-2021-45105? > Upgrade Log4j 2

[jira] [Commented] (NIFI-9474) Upgrade Log4j 2 to 2.15.0

2021-12-16 Thread Wesley Philip (Jira)
[ https://issues.apache.org/jira/browse/NIFI-9474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17460902#comment-17460902 ] Wesley Philip commented on NIFI-9474: - OK, thanks [~joewitt]  > Upgrade Log4j 2 to 2.15.0 >

[jira] [Commented] (NIFI-9474) Upgrade Log4j 2 to 2.15.0

2021-12-16 Thread Joe Witt (Jira)
[ https://issues.apache.org/jira/browse/NIFI-9474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17460891#comment-17460891 ] Joe Witt commented on NIFI-9474: [~wesley.philip] We don't have confirmed expoitable exposure but we have

[jira] [Commented] (NIFI-9474) Upgrade Log4j 2 to 2.15.0

2021-12-16 Thread Wesley Philip (Jira)
[ https://issues.apache.org/jira/browse/NIFI-9474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17460888#comment-17460888 ] Wesley Philip commented on NIFI-9474: - Thanks [~pvillard] .  I understand that NiFi 1.15.1 removes all

[jira] [Commented] (NIFI-9474) Upgrade Log4j 2 to 2.15.0

2021-12-16 Thread Pierre Villard (Jira)
[ https://issues.apache.org/jira/browse/NIFI-9474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17460854#comment-17460854 ] Pierre Villard commented on NIFI-9474: -- Those were already addressed by the initial first pull

[jira] [Commented] (NIFI-9474) Upgrade Log4j 2 to 2.15.0

2021-12-16 Thread Wesley Philip (Jira)
[ https://issues.apache.org/jira/browse/NIFI-9474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17460824#comment-17460824 ] Wesley Philip commented on NIFI-9474: - Regarding this statement in the description: > We do not

[jira] [Commented] (NIFI-9474) Upgrade Log4j 2 to 2.15.0

2021-12-15 Thread Joe Witt (Jira)
[ https://issues.apache.org/jira/browse/NIFI-9474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17460166#comment-17460166 ] Joe Witt commented on NIFI-9474: This being 2.15 isn't good enough. We've moved to 2.16 already. Plus

[jira] [Commented] (NIFI-9474) Upgrade Log4j 2 to 2.15.0

2021-12-15 Thread Wesley Philip (Jira)
[ https://issues.apache.org/jira/browse/NIFI-9474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17460164#comment-17460164 ] Wesley Philip commented on NIFI-9474: - Just wondering when this fix will be released publicly, in a