KAFKA-14044: Upgrade Netty and Jackson versions for CVE fixes#12376
Merged
showuon merged 2 commits intoapache:trunkfrom Jul 5, 2022
Merged
KAFKA-14044: Upgrade Netty and Jackson versions for CVE fixes#12376showuon merged 2 commits intoapache:trunkfrom
showuon merged 2 commits intoapache:trunkfrom
Conversation
Signed-off-by: Thomas Cooper <code@tomcooper.dev>
Signed-off-by: Thomas Cooper <code@tomcooper.dev>
Member
|
Failed tests are unrelated. |
showuon
changed the title
lmr3796
pushed a commit
to lmr3796/kafka
that referenced
this pull request
Jul 21, 2022
…FKA-14044] (apache#12376) Reviewers: Luke Chen <showuon@gmail.com> EXIT_CRITERIA=N/A
3 tasks
lmr3796
added a commit
to linkedin/kafka
that referenced
this pull request
Jul 21, 2022
…FKA-14044] (apache#12376) (#359) Reviewers: Luke Chen <showuon@gmail.com> EXIT_CRITERIA=N/A Co-authored-by: Thomas Cooper <code@tomcooper.dev>
cadonna
pushed a commit
that referenced
this pull request
Sep 9, 2022
Reviewers: Luke Chen <showuon@gmail.com>
cadonna
pushed a commit
that referenced
this pull request
Sep 9, 2022
Reviewers: Luke Chen <showuon@gmail.com>
cadonna
pushed a commit
that referenced
this pull request
Sep 9, 2022
Reviewers: Luke Chen <showuon@gmail.com>
Member
|
Backported to 3.2, 3.1, 3.0 |
fmin
added a commit
to confluentinc/kafka
that referenced
this pull request
Sep 14, 2022
…2022 * apache-kafka/3.0: (15 commits) MINOR: Update 3.0 branch version to 3.0.3-SNAPSHOT Upgrade Netty and Jackson versions for CVE fixes [KAFKA-14044] (apache#12376) Bump version to 3.0.2 KAFKA-10712; Update release scripts to Python3 (apache#11538) MINOR: Update LICENSE-binary MINOR: Update docs/upgrade.html MINOR: Update version to 3.0.2 MINOR: Add configurable max receive size for SASL authentication requests MINOR: Add more validation during KRPC deserialization MINOR: Add note on IDEMPOTENT_WRITE ACL to notable changes (apache#12260) ...
fmin
added a commit
to confluentinc/kafka
that referenced
this pull request
Sep 14, 2022
…1-14-SEP-2022 * apache-kafka/3.1: (17 commits) MINOR: Update 3.1 branch version to 3.1.3-SNAPSHOT Upgrade Netty and Jackson versions for CVE fixes [KAFKA-14044] (apache#12376) Bump version to 3.1.2 MINOR: Update LICENSE-binary MINOR: Bump version in upgrade guide to 3.1.2 MINOR: Add configurable max receive size for SASL authentication requests MINOR: Add more validation during KRPC deserialization MINOR: Add note on IDEMPOTENT_WRITE ACL to notable changes (apache#12260) KAFKA-14107: Upgrade Jetty version for CVE fixes (apache#12440) KAFKA-14062: OAuth client token refresh fails with SASL extensions (apache#12398) ...
fmin
added a commit
to confluentinc/kafka
that referenced
this pull request
Sep 14, 2022
…2-14-SEP-2022 * apache-kafka/3.2: (45 commits) MINOR: Bump version in upgrade guide to 3.2.3 KAFKA-14208; Do not raise wakeup in consumer during asynchronous offset commits (apache#12626) KAFKA-14196; Do not continue fetching partitions awaiting auto-commit prior to revocation (apache#12603) MINOR: 3.2 branch version to 3.2.3-SNAPSHOT Bump version to 3.2.2 Upgrade Netty and Jackson versions for CVE fixes [KAFKA-14044] (apache#12376) KAFKA-14194: Fix NPE in Cluster.nodeIfOnline (apache#12584) MINOR: Update LICENSE-binary MINOR: Align Scala version to 2.13.8 MINOR: Bump version in upgrade guide to 3.2.2 ...
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
KAFKA-14044 Upgrade Netty and Jackson for CVE fixes.
Netty: CVE-2022-24823 - Fixed by upgrading to 4.1.78
Jackson: CVE-2020-36518 - Fixed by upgrading to 2.13.3