You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@kafka.apache.org by "Gergely Harmadás (Jira)" <ji...@apache.org> on 2026/10/30 08:56:00 UTC

[jira] [Updated] (KAFKA-21395) Backport fix for CVE-2026-111115

     [ https://issues.apache.org/jira/browse/KAFKA-21395?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gergely Harmadás updated KAFKA-21395:
-------------------------------------
    Fix Version/s: 3.9.3

> Backport fix for CVE-2026-111115
> --------------------------------
>
>                 Key: KAFKA-21395
>                 URL: https://issues.apache.org/jira/browse/KAFKA-21395
>             Project: Kafka
>          Issue Type: Sub-task
>            Reporter: Gergely Harmadás
>            Assignee: Gergely Harmadás
>            Priority: Major
>             Fix For: 3.9.3
>
>
> Looks like KAFKA-21392 already covers the backport work as upstream commit [ea1f10a713|https://github.com/apache/kafka/commit/ea1f10a71306653fc9418a9bc1a835f8bdc32b8e] and [d89cb613d0|https://github.com/apache/kafka/commit/d89cb613d002957af869e083517b129f04dd7686] added fixes for both CVE-2026-111108 and CVE-2026-111115



--
This message was sent by Atlassian Jira
(v10.3.26#10030026)