Hi Bruno,

Thanks for your quick response.

Do you have any tentative Release date for 3.3.0?

Regards,
Sahil


-----Original Message-----
From: Bruno Cadonna <cado...@apache.org> 
Sent: 09 September 2022 03:15 PM
To: users@kafka.apache.org
Subject: Re: KAFKA 3.2.1 Vulnerabilities fix required

Hi Sahil,

I do not know when the next 3.2 patch release will be out. However, the 
upcoming 3.3.0 release fixes these vulnerabilities. The release candidate 1 of 
the 3.3.0 release is currently in the voting phase.

Best,
Bruno

On 09.09.22 11:33, Sahil Sharma D wrote:
> Hello team,
> 
> We are planning to use Kafka 3.2.1 but our security team finds below 
> Vulnerabilities in this version:
> 
> 
>    *   CVE-2022-24823 Medium (Xray and Trivy)
>    *   CVE-2022-2047 Low (Xray, Trivy and Anchor Grype)
>    *   CVE-2022-2048 High (Anchor Grype)
> 
> Kindly share your plan when these Vulnerabilities gets fixed.
> 
> Regards,
> Sahil
> 

Reply via email to