RE: Re: [kafka-clients] Re: [VOTE] 2.6.1 RC3

On 2021/01/05 16:26:04 Ismael Juma wrote: > Hi Mickael, > > Does that CVE even affect Kafka? Not sure if we gain much by delaying the > release even longer. People who really care about the CVE can also use > 2.7.0. > > Ismael > > On Tue, Jan 5, 2021 at 8:12 AM Mickael Maison wrote: > > > Hi, > >

Re: [kafka-clients] Re: [VOTE] 2.6.1 RC3

Hi Ismael, As far as I can tell, Kafka is not using the jackson-databind API that had the issue. If this is fine, I'll mark this vote as passed and I'll continue the release process. Thanks On Tue, Jan 5, 2021 at 4:27 PM Ismael Juma wrote: > > Hi Mickael, > > Does that CVE even affect Kafka? Not

Re: [kafka-clients] Re: [VOTE] 2.6.1 RC3

Hi Mickael, Does that CVE even affect Kafka? Not sure if we gain much by delaying the release even longer. People who really care about the CVE can also use 2.7.0. Ismael On Tue, Jan 5, 2021 at 8:12 AM Mickael Maison wrote: > Hi, > > Thanks for the votes. However, I'm going to build a new RC t

Re: [kafka-clients] Re: [VOTE] 2.6.1 RC3

Hi, Thanks for the votes. However, I'm going to build a new RC to pick the commit [1] that addresses CVE-2020-25649. 1: https://github.com/apache/kafka/commit/101ba2844f92451f633d11fd2ad3813f15d4a4f3 So closing this vote, I'll open a new one soon On Fri, Dec 18, 2020 at 4:45 AM Ismael Juma wr

[VOTE] 2.6.1 RC3

Any news on this? Would it be possible to get it out before Jan 14? Thanks.

Re: [VOTE] 2.6.1 RC3

Looks like you have your votes Mickael. :) Ismael On Fri, Dec 11, 2020 at 7:23 AM Mickael Maison wrote: > Hello Kafka users, developers and client-developers, > > This is the fourth candidate for release of Apache Kafka 2.6.1. > > Since RC2, the following JIRAs have been fixed: KAFKA-10811, KAF

Re: [VOTE] 2.6.1 RC3

Thanks for running the release Mickael! +1 (binding) - verified signatures - build from sources and ran tests - verified the three quickstarts -Matthias On 12/16/20 4:17 AM, Manikumar wrote: > Hi, > > +1 (binding) > - verified signatures > - ran the tests on the source archive with Scala 2.13

Re: [VOTE] 2.6.1 RC3

Hi, +1 (binding) - verified signatures - ran the tests on the source archive with Scala 2.13 - verified the core/connect/streams quickstart with Scala 2.13 binary archive. - verified the artifacts, javadoc Thanks for running the release! Thanks, Manikumar On Tue, Dec 15, 2020 at 9:01 PM Rajini

Re: [VOTE] 2.6.1 RC3

+1 (binding) Verified signatures, ran tests from source build (one flaky test failed but passed on rerun), ran Kafka quick start with the binary with both Scala 2.12 and Scala 2.13. Thanks for running the release, Mickael! Regards, Rajini On Fri, Dec 11, 2020 at 3:23 PM Mickael Maison wrote:

[VOTE] 2.6.1 RC3

Hello Kafka users, developers and client-developers, This is the fourth candidate for release of Apache Kafka 2.6.1. Since RC2, the following JIRAs have been fixed: KAFKA-10811, KAFKA-10802 Release notes for the 2.6.1 release: https://home.apache.org/~mimaison/kafka-2.6.1-rc3/RELEASE_NOTES.html