You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@kafka.apache.org by "chia7712 (via GitHub)" <gi...@apache.org> on 2026/03/25 18:19:53 UTC

Re: [PR] KAFKA-20349: Upgrade to ZooKeeper 3.8.6 - fix CVE-2026-24308 [kafka]

chia7712 commented on PR #21858:
URL: https://github.com/apache/kafka/pull/21858#issuecomment-4128775980

   zookeeper 3.8.5 had updated slf4j to 2.0.13 https://github.com/apache/zookeeper/commit/66202cb764c203f64b954a917e421be57d2ae67a
   
   Excluding `slf4j-api` from ZK in `build.gradle`. It is safe since ZK hasn't adopted SLF4J fluent APIs yet.
   
   ```
         implementation libs.dropwizardMetrics
         exclude module: 'slf4j-log4j12'
         exclude module: 'slf4j-api' <--- this one
         exclude module: 'log4j'
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org