[ 
https://issues.apache.org/jira/browse/NIFI-9770?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17812435#comment-17812435
 ] 

David Handermann commented on NIFI-9770:
----------------------------------------

Thanks [~mike.thomsen], I'm not actively working on this right now, so if you 
get to the point of having something ready, feel free to note that. I'll also 
update if I end up taking a closer look at these changes.

> Upgrade Cassandra Components to Datastax 4 Driver
> -------------------------------------------------
>
>                 Key: NIFI-9770
>                 URL: https://issues.apache.org/jira/browse/NIFI-9770
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Extensions
>            Reporter: David Handermann
>            Priority: Major
>
> The Processors and Controller Services in the {{nifi-cassandra-bundle}} 
> leverage the Datastax Driver version 3.10.2, which includes a transitive 
> dependency on Google Guava 19.0.  Older versions of Google Guava have several 
> associated vulnerabilities, which do not appear to impact the Datastax Driver 
> directly.  In order to upgrade to a more recent version of Google Guava, 
> however, it is necessary to upgrade to a recent version 4 release of the 
> Datastax Driver.  Datastax Driver 4.14.0 depends on Google Guava 25.0.
> The Datastax Driver version 4 supports access to Cassandra 2.1 and above, but 
> upgrading the driver from version 3 to version 4 requires a number of 
> changes.  Several of the client configuration properties, accessible through 
> NiFi component properties, must be provided through a different approach than 
> the current driver configuration strategy.  The Datastax Driver Upgrade Guide 
> provides a summary of the relevant driver changes:
> https://docs.datastax.com/en/developer/java-driver/4.13/upgrade_guide/#4-0-0



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to