Page History

...

Version 1.16.3 of Apache NiFi is a bug fix and security focused release.

Release Date: June XX 15 2022 (pending RC1 vote)

Highlights of the 1.16.3 release include:

• Security related updates for dependencies.
• Corrected a couple framework level issues with controller service and reporting task lifecycle management.
• Resolved a regression related to parameter context inheritance.
• Resolved CVE-2022-33140 - Improper Neutralization of Command Elements in Shell User Group Provider

A full list of issues that were resolved can be found at: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316020&version=12351844

...

• Fixed regressions in NiFi/Registry interaction from 1.16.
• Fixed regression for NiFi Registry interaction with databases from 1.16.
• Upgraded a large array of dependent libraries due to reported CVEs and/or bug fixes.
• Updates for AWS and Azure components too support more regions and fix defects.
• Substantial improvements to behaviors for XML related processing.
• 80+ JIRAs to fix bugs, enhance existing capability, and improve security.
• Resolved CVE-2022-29265 - Improper Restriction of XML External Entities in Multiple Components

A full list of issues that were resolved can be found at: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316020&version=12351504

...

• Framework Level Retry now supported.  For many years users build flows in various ways to make retries happen for a configured number of attempts.  Now this is easily and cleanly configured in the UI/API and simplifies the user experience and flow design considerably!  To those waiting for years for this thank you for your patience.
• Disconnected nodes can now rejoin the cluster, updating their flow to match whatever the cluster gives it (after writing a backup of the disconnected node's flow locally, of course!) - even when the flow is significantly different
• The cluster now allows changes to the dataflow even while there are disconnected nodes
• New components to read CEF messages, easily perform geohashing on records, and to listen for SNMP traps.
• New components to make data enrichment far easier - especially when enrichment comes from web services.
• UI now shows when component properties have leading or trailing whitespace - very helpful when copying a value from elsewhere and pasting it into NiFi
• UI now shows when all data in a queue is penalized, and the processor will no longer run millions of times per minute in order to accomplish nothing
• MiNiFi Java can now hot-load nars just like NiFi.
• Tons of bug fixes and improvements for processors that interact with cloud services on AWS, Azure, and GCP as well as SFTP, FTP, Kafka and more.
• Stateless NiFi getting better and better with improved classloader isolation and ability to run off local nars only.
• Security: Aggressively update libraries such as Jetty, Netty, Logging related libs (log4j, slf4j, etc..), and moved to latest H2 Database to eliminate any worries about a vulnerability in the older line.  Included a super slick mechanism to upgrade from the old database to the new one without the user having to worry about it.
• Resolved CVE-2022-26850 - Insufficiently Protected Credentials in Single User Login Identity Provider

A full list of issues that were resolved can be found at: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316020&version=12350741

...

A full list of issues that were resolved can be found at:  https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12343453&styleName=Html&projectId=12316020&Create=Create&atl_token=A5KQ-2QAV-T4JA-FDED_17e726af87cf931b3b2bfe6d09311c99a00dd659_lout

Note: The Apache NiFi Registry and Apache MiNiFi Java Agent codebases have been merged with the Apache NiFi codebase as of NiFi 1.14.0. Here are links for their release notes prior to this change:

...