You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@kafka.apache.org by "Divij Vaidya (Jira)" <ji...@apache.org> on 2023/11/14 12:36:00 UTC

[jira] [Updated] (KAFKA-15658) Zookeeper.jar | CVE-2023-44981

     [ https://issues.apache.org/jira/browse/KAFKA-15658?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Divij Vaidya updated KAFKA-15658:
---------------------------------
    Fix Version/s: 3.7.0
                   3.6.1

> Zookeeper.jar | CVE-2023-44981 
> -------------------------------
>
>                 Key: KAFKA-15658
>                 URL: https://issues.apache.org/jira/browse/KAFKA-15658
>             Project: Kafka
>          Issue Type: Bug
>            Reporter: masood
>            Priority: Critical
>             Fix For: 3.7.0, 3.6.1
>
>
> The [CVE-2023-44981|https://www.mend.io/vulnerability-database/CVE-2023-44981]  vulnerability has been reported in the zookeeper.jar. 
> It's worth noting that the latest version of Kafka has a dependency on version 3.8.2 of Zookeeper, which is also impacted by this vulnerability. 
> [https://mvnrepository.com/artifact/org.apache.zookeeper/zookeeper/3.8.2|https://mvnrepository.com/artifact/org.apache.zookeeper/zookeeper/3.8.2.]
> could you please verify its impact on the Kafka.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)