Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-9531

Nifi 1.15.2 still having older log4j

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Not A Problem
    • 1.15.1
    • 1.15.2
    • NiFi Stateless
    • None

    Description

      Nifi 1.15.0 and 1.15.2 both contains same log4j version (version 1.7.32) which is reported by security team as a vulnerability. 

      IT security team looking for  latest log4j version 2.17.

      Attachments

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            exceptionfactory David Handermann
            snarukurti Subbu
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment