[ https://issues.apache.org/jira/browse/NIFI-9770?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17809112#comment-17809112 ]
Mike Thomsen commented on NIFI-9770: ------------------------------------ [~exceptionfactory] I am planning to get back on this soon. You're welcome to start, but I think I have time to get back into this. > Upgrade Cassandra Components to Datastax 4 Driver > ------------------------------------------------- > > Key: NIFI-9770 > URL: https://issues.apache.org/jira/browse/NIFI-9770 > Project: Apache NiFi > Issue Type: Improvement > Components: Extensions > Reporter: David Handermann > Priority: Major > > The Processors and Controller Services in the {{nifi-cassandra-bundle}} > leverage the Datastax Driver version 3.10.2, which includes a transitive > dependency on Google Guava 19.0. Older versions of Google Guava have several > associated vulnerabilities, which do not appear to impact the Datastax Driver > directly. In order to upgrade to a more recent version of Google Guava, > however, it is necessary to upgrade to a recent version 4 release of the > Datastax Driver. Datastax Driver 4.14.0 depends on Google Guava 25.0. > The Datastax Driver version 4 supports access to Cassandra 2.1 and above, but > upgrading the driver from version 3 to version 4 requires a number of > changes. Several of the client configuration properties, accessible through > NiFi component properties, must be provided through a different approach than > the current driver configuration strategy. The Datastax Driver Upgrade Guide > provides a summary of the relevant driver changes: > https://docs.datastax.com/en/developer/java-driver/4.13/upgrade_guide/#4-0-0 -- This message was sent by Atlassian Jira (v8.20.10#820010)