You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jira@kafka.apache.org by "tinaselenge (via GitHub)" <gi...@apache.org> on 2025/04/25 15:06:00 UTC

[PR] MINOR: Update apacheds to 2.0.0.AM27 [kafka]

tinaselenge opened a new pull request, #19565:
URL: https://github.com/apache/kafka/pull/19565

   Dependencies such as api-ldap-client-api and mina-core used by the current version of apacheds have several critical CVEs: CVE-2018-1337, CVE-2024-52046 and CVE-2019-0231.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] MINOR: Update apacheds to 2.0.0.AM27 [kafka]

Posted by "showuon (via GitHub)" <gi...@apache.org>.
showuon commented on PR #19565:
URL: https://github.com/apache/kafka/pull/19565#issuecomment-2833727729

   Re-running CI.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] MINOR: Update apacheds to 2.0.0.AM27 [kafka]

Posted by "showuon (via GitHub)" <gi...@apache.org>.
showuon commented on PR #19565:
URL: https://github.com/apache/kafka/pull/19565#issuecomment-2834156939

   @tinaselenge , could you take a look at the error:
   ```
   * What went wrong:
   Execution failed for task ':core:compileTestScala'.
   > Could not resolve all files for configuration ':core:testCompileClasspath'.
   gradle/actions: Writing build results to /home/runner/work/_temp/.gradle-actions/build-results/__run_2-1745800197123.json
      > Could not find org.apache.directory.server:apacheds-protocol-kerberos:2.0.0.AM27.
        Searched in the following locations:
          - https://repo.maven.apache.org/maven2/org/apache/directory/server/apacheds-protocol-kerberos/2.0.0.AM27/apacheds-protocol-kerberos-2.0.0.AM27.pom
        Required by:
            project :core
   
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] MINOR: Update apacheds to 2.0.0.AM26 [kafka]

Posted by "showuon (via GitHub)" <gi...@apache.org>.
showuon commented on PR #19565:
URL: https://github.com/apache/kafka/pull/19565#issuecomment-3177988333

   Sorry, @sjhajharia , could you file a PR to revert this change? Thanks.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] MINOR: Update apacheds to 2.0.0.AM26 [kafka]

Posted by "showuon (via GitHub)" <gi...@apache.org>.
showuon merged PR #19565:
URL: https://github.com/apache/kafka/pull/19565


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] MINOR: Update apacheds to 2.0.0.AM27 [kafka]

Posted by "chia7712 (via GitHub)" <gi...@apache.org>.
chia7712 commented on PR #19565:
URL: https://github.com/apache/kafka/pull/19565#issuecomment-2953133462

   > so we could set apacheds to 2.0.0.AM26 instead or have a separate variable to set the version of apacheds-protocol-kerberos and all other apacheds libraries are bumped to 2.0.0.AM27 . 
   
   it sounds good


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] MINOR: Update apacheds to 2.0.0.AM26 [kafka]

Posted by "sjhajharia (via GitHub)" <gi...@apache.org>.
sjhajharia commented on PR #19565:
URL: https://github.com/apache/kafka/pull/19565#issuecomment-3177867187

   The class CacheService was dropped here: https://github.com/apache/directory-server/commit/f9c25f9c082007364d3a73475b192ee661425ea8


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] MINOR: Update apacheds to 2.0.0.AM26 [kafka]

Posted by "sjhajharia (via GitHub)" <gi...@apache.org>.
sjhajharia commented on PR #19565:
URL: https://github.com/apache/kafka/pull/19565#issuecomment-3178140290

   Hey @showuon , here is the revert PR: https://github.com/apache/kafka/pull/20341
   Thanks!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] MINOR: Update apacheds to 2.0.0.AM26 [kafka]

Posted by "sjhajharia (via GitHub)" <gi...@apache.org>.
sjhajharia commented on PR #19565:
URL: https://github.com/apache/kafka/pull/19565#issuecomment-3177841140

   This commit seems to have broken the trunk.
   
   `core/src/test/java/kafka/security/minikdc/MiniKdc.java:35:  error: cannot find symbol
   `
   I have a PR failing now : https://github.com/apache/kafka/actions/runs/16900142029/job/47877529597?pr=20303


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] MINOR: Update apacheds to 2.0.0.AM26 [kafka]

Posted by "showuon (via GitHub)" <gi...@apache.org>.
showuon commented on PR #19565:
URL: https://github.com/apache/kafka/pull/19565#issuecomment-3178215158

   Thank you @sjhajharia ! @tinaselenge , could you help resolve the compilation error and opened a PR again? Thanks.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] MINOR: Update apacheds to 2.0.0.AM27 [kafka]

Posted by "tinaselenge (via GitHub)" <gi...@apache.org>.
tinaselenge commented on PR #19565:
URL: https://github.com/apache/kafka/pull/19565#issuecomment-2838292051

   Thanks @showuon. I had a look and apacheds-protocol-kerberos seems to be the only apacheds library that doesn't have 2.0.0.AM27 release. It has 2.0.0.AM26 (from 2020) so we could set apacheds to 2.0.0.AM26 instead or have a separate variable to set the version of apacheds-protocol-kerberos and all other apacheds libraries are bumped to 2.0.0.AM27 . Wdyt? 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org