Hi all,
I'm cancelling this vote and I'll generate a new RC soon.
Best,
On Wed, Oct 16, 2024 at 5:39 PM Josep Prat wrote:
> Dependency update is on the way:
> https://github.com/apache/kafka/pull/17517
> Once merged, I'll cherry-pick it to 3.8, 3.7 and 3.9
>
> Best,
>
> On Wed, Oct 16, 2024 at
Dependency update is on the way: https://github.com/apache/kafka/pull/17517
Once merged, I'll cherry-pick it to 3.8, 3.7 and 3.9
Best,
On Wed, Oct 16, 2024 at 5:26 PM Chia-Ping Tsai wrote:
> > If I understand your comment correctly, we can't yet update the
> dependencies, right? We should wait
> If I understand your comment correctly, we can't yet update the
dependencies, right? We should wait for 9.4.57.
I double check the fix (https://github.com/jetty/jetty.project/pull/12012)
and we don't need to wait for 9.4.57 as the fix of `CVE-2024-6763` will not
be backported to 9.4.x ...
CVE-2
Hi Chia-Ping,
This issue was created between me pushing the tag and finishing all the
associated tasks for the RC. Nice catch!
If I understand your comment correctly, we can't yet update the
dependencies, right? We should wait for 9.4.57.
Best,
--
Josep Prat
Open Source Engineeri
hi Josep
I just notice https://issues.apache.org/jira/browse/KAFKA-17807 which want to
fix the CVEs. Should we include it in 3.8.1?
Best,
Chia-Ping
On 2024/10/16 08:21:02 Josep Prat wrote:
> Hello Kafka users, developers and client-developers,
>
> This is the first candidate for release of Apa
Hello Kafka users, developers and client-developers,
This is the first candidate for release of Apache Kafka 3.8.1.
This is a bugfix release with several fixes.
Release notes for the 3.8.1 release:
https://dist.apache.org/repos/dist/dev/kafka/3.8.1-rc0/RELEASE_NOTES.html
Please download, t