[jira] [Resolved] (KAFKA-13535) Workaround for mitigating CVE-2021-44228 Kafka

2021-12-11 Thread Luke Chen (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-13535?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Luke Chen resolved KAFKA-13535. --- Resolution: Won't Fix [~akansh] , thanks for reporting the issue. I've confirmed that Kafka is not

[jira] [Commented] (KAFKA-13534) Upgrade Log4j to 2.15.0 - CVE-2021-44228

2021-12-11 Thread Luke Chen (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17457566#comment-17457566 ] Luke Chen commented on KAFKA-13534: --- [~svudutala] , thanks for reporting the issue. I'

[jira] [Commented] (KAFKA-13534) Upgrade Log4j to 2.15.0 - CVE-2021-44228

2021-12-11 Thread Jason-Morries Adam (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17457568#comment-17457568 ] Jason-Morries Adam commented on KAFKA-13534: [~showuon] In my opinion, Log4J

[GitHub] [kafka] ayu-programer opened a new pull request #11594: How to define the quantity of consumption groups

2021-12-11 Thread GitBox
ayu-programer opened a new pull request #11594: URL: https://github.com/apache/kafka/pull/11594 Now I have more than 30 topics to consume, and each topic has 6 partitions. I need to write files through the consumer program. I don't know how many consumer groups to create? I understand that

[GitHub] [kafka] dajac commented on pull request #11571: KAFKA-13496: add reason to LeaveGroupRequest

2021-12-11 Thread GitBox
dajac commented on pull request #11571: URL: https://github.com/apache/kafka/pull/11571#issuecomment-991664350 @jeffkbkim That's right. We have to bump the version of both the request and the response. -- This is an automated message from the Apache Git Service. To respond to the message

[GitHub] [kafka] priyavj08 commented on pull request #7898: KAFKA-9366: Change log4j dependency into log4j2

2021-12-11 Thread GitBox
priyavj08 commented on pull request #7898: URL: https://github.com/apache/kafka/pull/7898#issuecomment-991672999 > Agree. After reconsidering the issue, I concluded that [CVE-2019-17571](https://github.com/advisories/GHSA-2qrg-x229-3v8q) is rather a minor issue; It is only problematic only

[GitHub] [kafka] priyavj08 removed a comment on pull request #7898: KAFKA-9366: Change log4j dependency into log4j2

2021-12-11 Thread GitBox
priyavj08 removed a comment on pull request #7898: URL: https://github.com/apache/kafka/pull/7898#issuecomment-991672999 > Agree. After reconsidering the issue, I concluded that [CVE-2019-17571](https://github.com/advisories/GHSA-2qrg-x229-3v8q) is rather a minor issue; It is only problema

[GitHub] [kafka] jetlyg commented on pull request #7898: KAFKA-9366: Change log4j dependency into log4j2

2021-12-11 Thread GitBox
jetlyg commented on pull request #7898: URL: https://github.com/apache/kafka/pull/7898#issuecomment-991704123 > > Will this PR solve [CVE-2021-44228](https://github.com/advisories/GHSA-jfh8-c2jp-5v3q)? > > @soumiksamanta > > https://github.com/apache/kafka/blob/bd3038383265f7

[GitHub] [kafka] jetlyg removed a comment on pull request #7898: KAFKA-9366: Change log4j dependency into log4j2

2021-12-11 Thread GitBox
jetlyg removed a comment on pull request #7898: URL: https://github.com/apache/kafka/pull/7898#issuecomment-991704123 > > Will this PR solve [CVE-2021-44228](https://github.com/advisories/GHSA-jfh8-c2jp-5v3q)? > > @soumiksamanta > > https://github.com/apache/kafka/blob/bd3038

[GitHub] [kafka] jetlyg commented on pull request #7898: KAFKA-9366: Change log4j dependency into log4j2

2021-12-11 Thread GitBox
jetlyg commented on pull request #7898: URL: https://github.com/apache/kafka/pull/7898#issuecomment-991704864 > > Will this PR solve [CVE-2021-44228](https://github.com/advisories/GHSA-jfh8-c2jp-5v3q)? > > @soumiksamanta > > https://github.com/apache/kafka/blob/bd3038383265f7

[GitHub] [kafka] jetlyg removed a comment on pull request #7898: KAFKA-9366: Change log4j dependency into log4j2

2021-12-11 Thread GitBox
jetlyg removed a comment on pull request #7898: URL: https://github.com/apache/kafka/pull/7898#issuecomment-991704864 > > Will this PR solve [CVE-2021-44228](https://github.com/advisories/GHSA-jfh8-c2jp-5v3q)? > > @soumiksamanta > > https://github.com/apache/kafka/blob/bd3038

[GitHub] [kafka] unverified-user commented on pull request #7898: KAFKA-9366: Change log4j dependency into log4j2

2021-12-11 Thread GitBox
unverified-user commented on pull request #7898: URL: https://github.com/apache/kafka/pull/7898#issuecomment-991705948 > > Will this PR solve [CVE-2021-44228](https://github.com/advisories/GHSA-jfh8-c2jp-5v3q)? > > @soumiksamanta > > https://github.com/apache/kafka/blob/bd303

[jira] [Commented] (KAFKA-13535) Workaround for mitigating CVE-2021-44228 Kafka

2021-12-11 Thread vijay (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-13535?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17457701#comment-17457701 ] vijay commented on KAFKA-13535: --- Hi Luke  I am using kafka 2.0 and and log4j is 1.2.17 . 

[GitHub] [kafka] lbradstreet opened a new pull request #11595: MINOR: timeout waitForBlock in connect BlockingConnectorTest

2021-12-11 Thread GitBox
lbradstreet opened a new pull request #11595: URL: https://github.com/apache/kafka/pull/11595 I've noticed some builds timing out on BlockingConnectorTest. This adds a timeout around the latch usage. -- This is an automated message from the Apache Git Service. To respond to the message,

[jira] [Commented] (KAFKA-13530) Flaky test ReplicaManagerTest

2021-12-11 Thread Lucas Bradstreet (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-13530?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17457714#comment-17457714 ] Lucas Bradstreet commented on KAFKA-13530: -- Just to note, the error checkpointi

[jira] [Commented] (KAFKA-13530) Flaky test ReplicaManagerTest

2021-12-11 Thread Lucas Bradstreet (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-13530?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17457716#comment-17457716 ] Lucas Bradstreet commented on KAFKA-13530: -- [~jolshan] if you look at some of t

[jira] [Comment Edited] (KAFKA-13534) Upgrade Log4j to 2.15.0 - CVE-2021-44228

2021-12-11 Thread Jason-Morries Adam (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17457568#comment-17457568 ] Jason-Morries Adam edited comment on KAFKA-13534 at 12/12/21, 12:30 AM: --

[jira] [Commented] (KAFKA-13535) Workaround for mitigating CVE-2021-44228 Kafka

2021-12-11 Thread Luke Chen (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-13535?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17457798#comment-17457798 ] Luke Chen commented on KAFKA-13535: --- No, log4j-1.x.x versions are not affected by this

[jira] [Created] (KAFKA-13536) Log4J2 Vulnerability zero-day exploit is going on. Will it impact kafka_2.12-2.3.0 version and do we need to upgrade?

2021-12-11 Thread Rajendra (Jira)
Rajendra created KAFKA-13536: Summary: Log4J2 Vulnerability zero-day exploit is going on. Will it impact kafka_2.12-2.3.0 version and do we need to upgrade? Key: KAFKA-13536 URL: https://issues.apache.org/jira/browse/

[jira] [Created] (KAFKA-13537) Will kafka_2.12-2.3.0 version be impacted by new zero-day exploit going on since last friday?

2021-12-11 Thread Rajendra (Jira)
Rajendra created KAFKA-13537: Summary: Will kafka_2.12-2.3.0 version be impacted by new zero-day exploit going on since last friday? Key: KAFKA-13537 URL: https://issues.apache.org/jira/browse/KAFKA-13537

[jira] [Resolved] (KAFKA-13536) Log4J2 Vulnerability zero-day exploit is going on. Will it impact kafka_2.12-2.3.0 version and do we need to upgrade?

2021-12-11 Thread Luke Chen (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-13536?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Luke Chen resolved KAFKA-13536. --- Resolution: Duplicate > Log4J2 Vulnerability zero-day exploit is going on. Will it impact > kafka_2

[jira] [Commented] (KAFKA-13537) Will kafka_2.12-2.3.0 version be impacted by new zero-day exploit going on since last friday?

2021-12-11 Thread Luke Chen (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-13537?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17457805#comment-17457805 ] Luke Chen commented on KAFKA-13537: --- [~rajnaik] , thanks for reporting the issue. I've

[jira] [Commented] (KAFKA-13535) Workaround for mitigating CVE-2021-44228 Kafka

2021-12-11 Thread Luke Chen (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-13535?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17457813#comment-17457813 ] Luke Chen commented on KAFKA-13535: --- [~vijaykaali811] , some update: log4j-1.x.x is no

[GitHub] [kafka] guozhangwang commented on a change in pull request #11581: KAFKA-13522: add position tracking and bounding to IQv2

2021-12-11 Thread GitBox
guozhangwang commented on a change in pull request #11581: URL: https://github.com/apache/kafka/pull/11581#discussion_r767034399 ## File path: streams/src/main/java/org/apache/kafka/streams/state/internals/CachingKeyValueStore.java ## @@ -107,10 +107,10 @@ private void putAndM

[GitHub] [kafka] cmccabe merged pull request #11577: KAFKA-13515: Fix KRaft config validation issues

2021-12-11 Thread GitBox
cmccabe merged pull request #11577: URL: https://github.com/apache/kafka/pull/11577 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: jira-unsubscr.

[GitHub] [kafka] jetlyg commented on pull request #7898: KAFKA-9366: Change log4j dependency into log4j2

2021-12-11 Thread GitBox
jetlyg commented on pull request #7898: URL: https://github.com/apache/kafka/pull/7898#issuecomment-991704123 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe

[GitHub] [kafka] dajac commented on pull request #11571: KAFKA-13496: add reason to LeaveGroupRequest

2021-12-11 Thread GitBox
dajac commented on pull request #11571: URL: https://github.com/apache/kafka/pull/11571#issuecomment-991664350 @jeffkbkim That's right. We have to bump the version of both the request and the response. -- This is an automated message from the Apache Git Service. To respond to the message

[GitHub] [kafka] cmccabe closed pull request #11544: MINOR: some code cleanups in the controller

2021-12-11 Thread GitBox
cmccabe closed pull request #11544: URL: https://github.com/apache/kafka/pull/11544 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: jira-unsubscr.

[GitHub] [kafka] omkreddy closed pull request #11507: Terminating process due to signal SIGTERM

2021-12-11 Thread GitBox
omkreddy closed pull request #11507: URL: https://github.com/apache/kafka/pull/11507 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: jira-unsubscr

[GitHub] [kafka] vvcephei commented on a change in pull request #11581: KAFKA-13522: add position tracking and bounding to IQv2

2021-12-11 Thread GitBox
vvcephei commented on a change in pull request #11581: URL: https://github.com/apache/kafka/pull/11581#discussion_r767028987 ## File path: streams/src/main/java/org/apache/kafka/streams/state/internals/StoreQueryUtils.java ## @@ -62,4 +71,28 @@ public static void updatePositio

[GitHub] [kafka] wcarlson5 closed pull request #11570: KAFKA-12648: Wait for all threads to be on an empty topology before unsubscribing

2021-12-11 Thread GitBox
wcarlson5 closed pull request #11570: URL: https://github.com/apache/kafka/pull/11570 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: jira-unsubsc

[GitHub] [kafka] svudutala-vmware commented on pull request #7898: KAFKA-9366: Change log4j dependency into log4j2

2021-12-11 Thread GitBox
svudutala-vmware commented on pull request #7898: URL: https://github.com/apache/kafka/pull/7898#issuecomment-991209328 > Will this PR solve [CVE-2021-44228](https://github.com/advisories/GHSA-jfh8-c2jp-5v3q)? @soumiksamanta https://github.com/apache/kafka/blob/bd3038383265f7bb850c0

[GitHub] [kafka] guozhangwang commented on a change in pull request #11591: KAFKA-12648: fix IllegalStateException in ClientState after removing topologies

2021-12-11 Thread GitBox
guozhangwang commented on a change in pull request #11591: URL: https://github.com/apache/kafka/pull/11591#discussion_r766944544 ## File path: streams/src/test/java/org/apache/kafka/streams/processor/internals/assignment/ClientStateTest.java ## @@ -406,12 +428,31 @@ public voi

[GitHub] [kafka] priyavj08 removed a comment on pull request #7898: KAFKA-9366: Change log4j dependency into log4j2

2021-12-11 Thread GitBox
priyavj08 removed a comment on pull request #7898: URL: https://github.com/apache/kafka/pull/7898#issuecomment-991672999 > Agree. After reconsidering the issue, I concluded that [CVE-2019-17571](https://github.com/advisories/GHSA-2qrg-x229-3v8q) is rather a minor issue; It is only problema

[GitHub] [kafka] priyavj08 commented on pull request #7898: KAFKA-9366: Change log4j dependency into log4j2

2021-12-11 Thread GitBox
priyavj08 commented on pull request #7898: URL: https://github.com/apache/kafka/pull/7898#issuecomment-991672999 > Agree. After reconsidering the issue, I concluded that [CVE-2019-17571](https://github.com/advisories/GHSA-2qrg-x229-3v8q) is rather a minor issue; It is only problematic only

[GitHub] [kafka] jsancio closed pull request #11536: MINOR; Update merge script to work against Python3

2021-12-11 Thread GitBox
jsancio closed pull request #11536: URL: https://github.com/apache/kafka/pull/11536 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: jira-unsubscr.

[GitHub] [kafka] jsancio commented on a change in pull request #11593: KAFKA-13528: KRaft RegisterBroker should validate that the cluster ID matches

2021-12-11 Thread GitBox
jsancio commented on a change in pull request #11593: URL: https://github.com/apache/kafka/pull/11593#discussion_r766913504 ## File path: metadata/src/test/java/org/apache/kafka/controller/ClusterControlManagerTest.java ## @@ -84,6 +90,27 @@ public void testReplay() {

[GitHub] [kafka] svudutala-vmware edited a comment on pull request #7898: KAFKA-9366: Change log4j dependency into log4j2

2021-12-11 Thread GitBox
svudutala-vmware edited a comment on pull request #7898: URL: https://github.com/apache/kafka/pull/7898#issuecomment-991209328 > Will this PR solve [CVE-2021-44228](https://github.com/advisories/GHSA-jfh8-c2jp-5v3q)? @soumiksamanta https://github.com/apache/kafka/blob/bd3038383265f7

[GitHub] [kafka] jsancio commented on pull request #11536: MINOR; Update merge script to work against Python3

2021-12-11 Thread GitBox
jsancio commented on pull request #11536: URL: https://github.com/apache/kafka/pull/11536#issuecomment-991216638 Merged as https://github.com/apache/kafka/commit/0c01ab67a034a9454fdd1e0c791c56c5466d9ff4 -- This is an automated message from the Apache Git Service. To respond to the messag

[GitHub] [kafka] omkreddy closed pull request #11506: kafka_2.10-0.10.0.0 shutdown

2021-12-11 Thread GitBox
omkreddy closed pull request #11506: URL: https://github.com/apache/kafka/pull/11506 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: jira-unsubscr

[GitHub] [kafka] omkreddy commented on pull request #11506: kafka_2.10-0.10.0.0 shutdown

2021-12-11 Thread GitBox
omkreddy commented on pull request #11506: URL: https://github.com/apache/kafka/pull/11506#issuecomment-991217959 Pls raise a Kafka JIRA (https://issues.apache.org/jira/projects/KAFKA/) for any issue. -- This is an automated message from the Apache Git Service. To respond to the message,

[GitHub] [kafka] jetlyg removed a comment on pull request #7898: KAFKA-9366: Change log4j dependency into log4j2

2021-12-11 Thread GitBox
jetlyg removed a comment on pull request #7898: URL: https://github.com/apache/kafka/pull/7898#issuecomment-991704123 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To uns

[GitHub] [kafka] vvcephei commented on pull request #11581: KAFKA-13522: add position tracking and bounding to IQv2

2021-12-11 Thread GitBox
vvcephei commented on pull request #11581: URL: https://github.com/apache/kafka/pull/11581#issuecomment-991497134 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubsc

[GitHub] [kafka] hachikuji merged pull request #11503: KAFKA-13456: Tighten KRaft config checks/constraints

2021-12-11 Thread GitBox
hachikuji merged pull request #11503: URL: https://github.com/apache/kafka/pull/11503 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: jira-unsubsc

[GitHub] [kafka] unverified-user commented on pull request #7898: KAFKA-9366: Change log4j dependency into log4j2

2021-12-11 Thread GitBox
unverified-user commented on pull request #7898: URL: https://github.com/apache/kafka/pull/7898#issuecomment-991705948 > > Will this PR solve [CVE-2021-44228](https://github.com/advisories/GHSA-jfh8-c2jp-5v3q)? > > @soumiksamanta > > https://github.com/apache/kafka/blob/bd303

[GitHub] [kafka] ableegoldman commented on pull request #11591: KAFKA-12648: fix IllegalStateException in ClientState after removing topologies

2021-12-11 Thread GitBox
ableegoldman commented on pull request #11591: URL: https://github.com/apache/kafka/pull/11591#issuecomment-991243851 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To uns

[GitHub] [kafka] ableegoldman merged pull request #11591: KAFKA-12648: fix IllegalStateException in ClientState after removing topologies

2021-12-11 Thread GitBox
ableegoldman merged pull request #11591: URL: https://github.com/apache/kafka/pull/11591 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: jira-unsu

[GitHub] [kafka] omkreddy commented on pull request #11507: Terminating process due to signal SIGTERM

2021-12-11 Thread GitBox
omkreddy commented on pull request #11507: URL: https://github.com/apache/kafka/pull/11507#issuecomment-991218175 Pls raise a Kafka JIRA (https://issues.apache.org/jira/projects/KAFKA/) for any issue. -- This is an automated message from the Apache Git Service. To respond to the message,

[GitHub] [kafka] cmccabe commented on pull request #11544: MINOR: some code cleanups in the controller

2021-12-11 Thread GitBox
cmccabe commented on pull request #11544: URL: https://github.com/apache/kafka/pull/11544#issuecomment-991372206 merged -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To

[GitHub] [kafka] cmccabe commented on pull request #11593: KAFKA-13528: KRaft RegisterBroker should validate that the cluster ID matches

2021-12-11 Thread GitBox
cmccabe commented on pull request #11593: URL: https://github.com/apache/kafka/pull/11593#issuecomment-991360698 > What should be the broker behavior if cannot register because of an invalid cluster id? Looking at the current code it looks like the broker will continue to retry. Inconsiste

[GitHub] [kafka] ableegoldman commented on a change in pull request #11591: KAFKA-12648: fix IllegalStateException in ClientState after removing topologies

2021-12-11 Thread GitBox
ableegoldman commented on a change in pull request #11591: URL: https://github.com/apache/kafka/pull/11591#discussion_r766945306 ## File path: streams/src/test/java/org/apache/kafka/streams/processor/internals/assignment/ClientStateTest.java ## @@ -406,12 +428,31 @@ public voi

[GitHub] [kafka] guozhangwang commented on pull request #11589: MINOR: update log and method name

2021-12-11 Thread GitBox
guozhangwang commented on pull request #11589: URL: https://github.com/apache/kafka/pull/11589#issuecomment-991249843 Re-trigger the jenkins jobs. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to

[GitHub] [kafka] vvcephei merged pull request #11581: KAFKA-13522: add position tracking and bounding to IQv2

2021-12-11 Thread GitBox
vvcephei merged pull request #11581: URL: https://github.com/apache/kafka/pull/11581 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: jira-unsubscr