[
https://issues.apache.org/jira/browse/NIFI-8604?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17349348#comment-17349348
]
ASF subversion and git services commented on NIFI-8604:
-------------------------------------------------------
Commit 1c17da562bcf581af93a22577067c26fe2c7444d in nifi's branch
refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=1c17da5 ]
NIFI-8604 Upgraded Apache Accumulo to 2.0.1
Signed-off-by: Nathan Gough <thena...@gmail.com>
This closes #5077.
> Upgrade Apache Accumulo to 2.0.1
> --------------------------------
>
> Key: NIFI-8604
> URL: https://issues.apache.org/jira/browse/NIFI-8604
> Project: Apache NiFi
> Issue Type: Improvement
> Affects Versions: 1.13.2
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Minor
> Labels: dependency-upgrade
> Time Spent: 1h 40m
> Remaining Estimate: 0h
>
> Apache Accumulo server 2.0.0 is impacted by
> [CVE-2020-17533|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17533],
> which was resolved in version 2.0.1. Although the vulnerability does not
> impact NiFi client code, upgrading from version 2.0.0 maintains version
> parity with Accumulo server and avoids false positives in the OWASP
> Dependency Check Report.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
