Kafka/Zookeeper

["Scott, Thomas G" <th...@lmco.com>]

I have a quick question regarding kafka 2.4.0 and it's compatibility with Zookeeper.  According to redhat, it looks like that perhaps kafka 2.4.0 requires Zookeeper 3.5.7 on RHEL 7.  Could you please confirm, as it appears that according to the release notes, that Zookeeper 3.5.7 is not required until kafka 2.4.1.


Thanks,
Tom

Re: Kafka/Zookeeper

[Tom Bentley <tb...@redhat.com>]

Hi Tom,

It's not that Kafka 2.4.0 _requires_ Zookeeper 3.5.7. Rather, previous
versions of Zookeeper suffered from security vulnerabilities and when Red
Hat were preparing our product based on Kafka 2.4.0 the decision was taken
to ship Zookeeper 3.5.7 to avoid those vulnerabilities. IIRC 3.5.7 wasn't
available at the time Apache Kafka 2.4.0 was released, was by the time we
were preparing the product and was subsequently picked up for Apache Kafka
2.4.1, to avoid those same vulnerabilities.

Kind regards,

Tom

On Tue, Oct 6, 2020 at 6:09 AM Scott, Thomas G <th...@lmco.com>
wrote:

> I have a quick question regarding kafka 2.4.0 and it's compatibility with
> Zookeeper.  According to redhat, it looks like that perhaps kafka 2.4.0
> requires Zookeeper 3.5.7 on RHEL 7.  Could you please confirm, as it
> appears that according to the release notes, that Zookeeper 3.5.7 is not
> required until kafka 2.4.1.
>
>
> Thanks,
> Tom
>