[jira] [Commented] (NIFI-9770) Upgrade Cassandra Components to Datastax 4 Driver
[ https://issues.apache.org/jira/browse/NIFI-9770?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17812435#comment-17812435 ] David Handermann commented on NIFI-9770: Thanks [~mike.thomsen], I'm not actively working on this right now, so if you get to the point of having something ready, feel free to note that. I'll also update if I end up taking a closer look at these changes. > Upgrade Cassandra Components to Datastax 4 Driver > - > > Key: NIFI-9770 > URL: https://issues.apache.org/jira/browse/NIFI-9770 > Project: Apache NiFi > Issue Type: Improvement > Components: Extensions >Reporter: David Handermann >Priority: Major > > The Processors and Controller Services in the {{nifi-cassandra-bundle}} > leverage the Datastax Driver version 3.10.2, which includes a transitive > dependency on Google Guava 19.0. Older versions of Google Guava have several > associated vulnerabilities, which do not appear to impact the Datastax Driver > directly. In order to upgrade to a more recent version of Google Guava, > however, it is necessary to upgrade to a recent version 4 release of the > Datastax Driver. Datastax Driver 4.14.0 depends on Google Guava 25.0. > The Datastax Driver version 4 supports access to Cassandra 2.1 and above, but > upgrading the driver from version 3 to version 4 requires a number of > changes. Several of the client configuration properties, accessible through > NiFi component properties, must be provided through a different approach than > the current driver configuration strategy. The Datastax Driver Upgrade Guide > provides a summary of the relevant driver changes: > https://docs.datastax.com/en/developer/java-driver/4.13/upgrade_guide/#4-0-0 -- This message was sent by Atlassian Jira (v8.20.10#820010)
[jira] [Commented] (NIFI-9770) Upgrade Cassandra Components to Datastax 4 Driver
[ https://issues.apache.org/jira/browse/NIFI-9770?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17809112#comment-17809112 ] Mike Thomsen commented on NIFI-9770: [~exceptionfactory] I am planning to get back on this soon. You're welcome to start, but I think I have time to get back into this. > Upgrade Cassandra Components to Datastax 4 Driver > - > > Key: NIFI-9770 > URL: https://issues.apache.org/jira/browse/NIFI-9770 > Project: Apache NiFi > Issue Type: Improvement > Components: Extensions >Reporter: David Handermann >Priority: Major > > The Processors and Controller Services in the {{nifi-cassandra-bundle}} > leverage the Datastax Driver version 3.10.2, which includes a transitive > dependency on Google Guava 19.0. Older versions of Google Guava have several > associated vulnerabilities, which do not appear to impact the Datastax Driver > directly. In order to upgrade to a more recent version of Google Guava, > however, it is necessary to upgrade to a recent version 4 release of the > Datastax Driver. Datastax Driver 4.14.0 depends on Google Guava 25.0. > The Datastax Driver version 4 supports access to Cassandra 2.1 and above, but > upgrading the driver from version 3 to version 4 requires a number of > changes. Several of the client configuration properties, accessible through > NiFi component properties, must be provided through a different approach than > the current driver configuration strategy. The Datastax Driver Upgrade Guide > provides a summary of the relevant driver changes: > https://docs.datastax.com/en/developer/java-driver/4.13/upgrade_guide/#4-0-0 -- This message was sent by Atlassian Jira (v8.20.10#820010)