[NIFI-8987] Upgrade Apache PDFBox to 2.0.24

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.15.0
• Fix Version/s: 1.15.0
• Component/s: Extensions
• Labels: security
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 02/Aug/21 20:01
• Updated: 03/Aug/21 08:07
• Resolved: 03/Aug/21 08:07

Description

Apache PDFBox 2.0.24 addresses CVE-2021-31811 and CVE-2021-31812 related to memory consumption when parsing crafted PDF files.

Issue Links

• links to: GitHub Pull Request #5272