[NIFI-11822] Upgrade Okio to 3.4.0

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0-M1, 1.23.0
• Component/s: Core Framework, Extensions
• Labels: dependency-upgrade
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 17/Jul/23 14:23
• Updated: 18/Jul/23 08:06
• Resolved: 18/Jul/23 08:06

Description

The Okio library supports the OkHttp client for handling HTTP requests in framework and extension components. Okio 3.4.0 resolves CVE-2023-3635 related to handling malformed Gzip buffers.

Issue Links

• links to: GitHub Pull Request #7488