You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@kafka.apache.org by "Bruno Cadonna (Jira)" <ji...@apache.org> on 2023/08/18 16:35:00 UTC

[jira] [Resolved] (KAFKA-15319) Upgrade rocksdb to fix CVE-2022-37434

     [ https://issues.apache.org/jira/browse/KAFKA-15319?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Bruno Cadonna resolved KAFKA-15319.
-----------------------------------
    Resolution: Fixed

> Upgrade rocksdb to fix CVE-2022-37434
> -------------------------------------
>
>                 Key: KAFKA-15319
>                 URL: https://issues.apache.org/jira/browse/KAFKA-15319
>             Project: Kafka
>          Issue Type: Bug
>          Components: streams
>    Affects Versions: 3.4.1
>            Reporter: Maruthi
>            Assignee: Lucas Brutschy
>            Priority: Critical
>             Fix For: 3.6.0
>
>         Attachments: compat_report.html.zip
>
>
> Rocksdbjni<7.9.2 is vulnerable to CVE-2022-37434 due to zlib 1.2.12
> Upgrade to 1.2.13 to fix 
> https://github.com/facebook/rocksdb/commit/0993c9225f8086bab6c4c0a2d7206897d1cc688c



--
This message was sent by Atlassian Jira
(v8.20.10#820010)