New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

kafka-3.8/3.9 GHSA-qh8g-58pp-2wxh advisory update #9371

Merged

luhring merged 1 commit into wolfi-dev:main from jamie-albert:kafka-3.8/3.9-GHSA-qh8g-58pp-2wxh-update

Dec 10, 2024

Member

jamie-albert commented Dec 10, 2024 •

edited

Loading

1. GHSA-qh8g-58pp-2wxh

pending-upstream-fix:
Details: After investigation the remediation for this CVE is incredibly involved and requires dropping support for JDK11 This is why the changes are slated for kafka-4.0.0 release which is targeted in late January. Last required implementation PR KAFKA-16437 - Upgrade to Jakarta and Jetty 12 (KIP-1032) apache/kafka#16754 is actually being built in their CI right now


          kafka-3.8/3.9 GHSA-qh8g-58pp-2wxh advisory update

jamie-albert requested a review from a team

December 10, 2024 05:18

luhring approved these changes

View reviewed changes

luhring added this pull request to the merge queue

Merged via the queue into wolfi-dev:main with commit 9dbf6bc

7 checks passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet