[NIFI-10187] Upgrade Apache FtpServer to 1.2.0 - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Minor
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 1.17.0
Component/s: None
Labels:
- dependency-upgrade

Description

Apache FtpServer 1.1.1 depends on a version of Apache MINA vulnerable to CVE-2019-0231, related to socket close handling for TLS communication. The FtpServer dependency should be upgraded to 1.2.0, which incorporates a new version of Apache MINA.

Attachments

Issue Links

links to

GitHub Pull Request #6171

Activity

People

Assignee:: David Handermann

Reporter:: David Handermann

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 30/Jun/22 20:19

Updated:: 01/Jul/22 12:24

Resolved:: 01/Jul/22 12:24

Time Tracking

Estimated:

Not Specified

Remaining:

Logged:

20m