dev  

Messages by Thread

• CVE-2026-105942: Apache Pulsar: Original principal of proxied requests authorized with the proxy's authentication data, allowing privilege escalation Lari Hotari
• CVE-2026-105930: Apache Pulsar: Improper Authorization of Function, Source and Sink Package URLs Allows Cross-Tenant Package Download Lari Hotari
• CVE-2026-105931: Apache Pulsar: Missing authorization on transaction admin endpoints exposes transaction coordinator and transaction statistics of other tenants Lari Hotari
• CVE-2026-105945: Apache Pulsar: Improper Validation of Package Name Components Allows Cross-Tenant Package Access in Filesystem Package Storage Lari Hotari
• CVE-2026-105937: Apache Pulsar: Missing authorization of the shadow topic source allows cross-tenant message disclosure and deletion of source topic data Lari Hotari
• CVE-2026-105944: Apache Pulsar Manager: Missing authentication and authorization and disclosure of the Pulsar admin credential; end of life Lari Hotari
• CVE-2026-105938: Apache Pulsar: Subscription authorization policies not enforced by namespace-level backlog and unsubscribe operations and by topic expire-all Lari Hotari
• CVE-2026-105936: Apache Pulsar: Functions connectors list endpoint does not apply the super-user check of the worker connectors endpoint Lari Hotari
• CVE-2026-105935: Apache Pulsar: Function trigger publishes to the input topic without checking the caller's produce permission Lari Hotari
• CVE-2026-105933: Apache Pulsar: Namespace encryption requirement not enforced after a failure during topic initialization Lari Hotari
• CVE-2026-105934: Apache Pulsar: Missing tenant admin authorization check when truncating a partitioned topic Lari Hotari
• CVE-2026-105932: Apache Pulsar: Missing topic policy authorization on non-persistent topic entry filter endpoints Lari Hotari
• CVE-2026-105927: Apache Pulsar: Improper authorization of WebSocket consumer dead letter topic allows writes without PRODUCE permission Lari Hotari
• CVE-2026-105926: Apache Pulsar: Missing Topic Authorization on Binary Protocol GetSchema and GetOrCreateSchema Commands Lari Hotari
• CVE-2026-105869: Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous user role Lari Hotari
• [DISCUSS] Going through the backlog of open pull requests Matteo Merli
• [ANNOUNCE] Apache Pulsar Helm Chart version 4.8.0 Released Lari Hotari
• [ANNOUNCE] Apache Pulsar C# Client DotPulsar 5.3.4 released David Jensen
• [RESULT][VOTE] Apache Pulsar DotPulsar 5.3.4 released David Jensen
• [VOTE] PIP-246: Improved PROTOBUF_NATIVE schema compatibility checks without using avro-protobuf SiNan Liu
  • Re: [VOTE] PIP-246: Improved PROTOBUF_NATIVE schema compatibility checks without using avro-protobuf Lari Hotari
  • Re: [VOTE] PIP-246: Improved PROTOBUF_NATIVE schema compatibility checks without using avro-protobuf PengHui Li
• [VOTE] Release Apache Pulsar Helm Chart 4.8.0 based on 4.8.0-candidate-1; upgrade to Pulsar 5.0.0 as the default image Lari Hotari
  • Re: [VOTE] Release Apache Pulsar Helm Chart 4.8.0 based on 4.8.0-candidate-1; upgrade to Pulsar 5.0.0 as the default image void-ptr974 via dev
  • Re: [VOTE] Release Apache Pulsar Helm Chart 4.8.0 based on 4.8.0-candidate-1; upgrade to Pulsar 5.0.0 as the default image David Jensen
  • Re: [VOTE] Release Apache Pulsar Helm Chart 4.8.0 based on 4.8.0-candidate-1; upgrade to Pulsar 5.0.0 as the default image Zixuan Liu
  • Re: [VOTE] Release Apache Pulsar Helm Chart 4.8.0 based on 4.8.0-candidate-1; upgrade to Pulsar 5.0.0 as the default image Lari Hotari
  • Re: [VOTE] Release Apache Pulsar Helm Chart 4.8.0 based on 4.8.0-candidate-1; upgrade to Pulsar 5.0.0 as the default image Lari Hotari
• [ANNOUNCE] Apache Pulsar 5.0.0 LTS released Lari Hotari
• [ANNOUNCE] Apache Pulsar 4.0.14 released Lari Hotari
• [ANNOUNCE] Apache Pulsar 4.2.5 released Lari Hotari
• [VOTE] Release Apache Pulsar 4.2.5 based on 4.2.5-candidate-1 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 4.2.5 based on 4.2.5-candidate-1 void-ptr974 via dev
  • Re: [VOTE] Release Apache Pulsar 4.2.5 based on 4.2.5-candidate-1 PengHui Li
  • Re: [VOTE] Release Apache Pulsar 4.2.5 based on 4.2.5-candidate-1 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 4.2.5 based on 4.2.5-candidate-1 Matteo Merli
  • Re: [VOTE] Release Apache Pulsar 4.2.5 based on 4.2.5-candidate-1 Lari Hotari
• [VOTE] Release Apache Pulsar 4.0.14 based on 4.0.14-candidate-1 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 4.0.14 based on 4.0.14-candidate-1 void-ptr974 via dev
  • Re: [VOTE] Release Apache Pulsar 4.0.14 based on 4.0.14-candidate-1 PengHui Li
  • Re: [VOTE] Release Apache Pulsar 4.0.14 based on 4.0.14-candidate-1 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 4.0.14 based on 4.0.14-candidate-1 Matteo Merli
  • Re: [VOTE] Release Apache Pulsar 4.0.14 based on 4.0.14-candidate-1 Lari Hotari
• [VOTE] Release Apache Pulsar 5.0.0 based on 5.0.0-candidate-1 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 5.0.0 based on 5.0.0-candidate-1 void-ptr974 via dev
  • Re: [VOTE] Release Apache Pulsar 5.0.0 based on 5.0.0-candidate-1 PengHui Li
  • Re: [VOTE] Release Apache Pulsar 5.0.0 based on 5.0.0-candidate-1 Matteo Merli
  • Re: [VOTE] Release Apache Pulsar 5.0.0 based on 5.0.0-candidate-1 Tao Jiuming
  • Re: [VOTE] Release Apache Pulsar 5.0.0 based on 5.0.0-candidate-1 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 5.0.0 based on 5.0.0-candidate-1 Lari Hotari
• [VOTE] DotPulsar Release 5.3.4-rc.1 David Jensen
  • Re: [VOTE] DotPulsar Release 5.3.4-rc.1 Daniel Blankensteiner
  • Re: [VOTE] DotPulsar Release 5.3.4-rc.1 David Jensen
  • Re: [VOTE] DotPulsar Release 5.3.4-rc.1 Lari Hotari
• [DISCUSS] Backport topic-loading observability improvements to branch-4.0 and branch-4.2 Yubiao Feng
  • Re: [DISCUSS] Backport topic-loading observability improvements to branch-4.0 and branch-4.2 Yubiao Feng
  • Re: [DISCUSS] Backport topic-loading observability improvements to branch-4.0 and branch-4.2 Tao Jiuming
• [VOTE] PIP-496: Pulsar Functions and IO support for the V5 client and scalable topics Lari Hotari
  • Re: [VOTE] PIP-496: Pulsar Functions and IO support for the V5 client and scalable topics Tao Jiuming
  • Re: [VOTE] PIP-496: Pulsar Functions and IO support for the V5 client and scalable topics Matteo Merli
  • Re:[VOTE] PIP-496: Pulsar Functions and IO support for the V5 client and scalable topics Dream95
  • [RESULT][VOTE] PIP-496: Pulsar Functions and IO support for the V5 client and scalable topics Lari Hotari
• [DISCUSS] PIP-496: Pulsar Functions and IO support for the V5 client and scalable topics Lari Hotari
• [DISCUSS] PIP-246: Improved PROTOBUF_NATIVE schema compatibility checks without using avro-protobuf SiNan Liu
• [DISCUSS] PIP-495: Scalable Topic Geo-Replication Matteo Merli
• Swag request from a high school student who loves Apache Pulsar Anshumaan Vyas
• [ANNOUNCE] Apache Pulsar 5.0.0-M2 released Lari Hotari
• [VOTE] PIP-494: Scalable Topics Client Specification — authoritative reference and change process Matteo Merli
  • Re: [VOTE] PIP-494: Scalable Topics Client Specification — authoritative reference and change process PengHui Li
  • Re: [VOTE] PIP-494: Scalable Topics Client Specification — authoritative reference and change process Lari Hotari
  • Re: [VOTE] PIP-494: Scalable Topics Client Specification — authoritative reference and change process Tao Jiuming
  • [RESULT] [VOTE] PIP-494: Scalable Topics Client Specification — authoritative reference and change process Matteo Merli
• [DISCUSS] Cutting a pulsar-client-go release from current master david kjerrumgaard
• [NOTICE] Please use the "Update branch" button on PRs sparingly Lari Hotari
• [REPORT] Pulsar - September 2026 Matteo Merli
• [VOTE] Release Apache Pulsar 5.0.0-M2 based on 5.0.0-M2-candidate-1 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 5.0.0-M2 based on 5.0.0-M2-candidate-1 Matteo Merli
  • Re: [VOTE] Release Apache Pulsar 5.0.0-M2 based on 5.0.0-M2-candidate-1 PengHui Li
  • Re: [VOTE] Release Apache Pulsar 5.0.0-M2 based on 5.0.0-M2-candidate-1 Zixuan Liu
  • Re: [VOTE] Release Apache Pulsar 5.0.0-M2 based on 5.0.0-M2-candidate-1 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 5.0.0-M2 based on 5.0.0-M2-candidate-1 David Jensen
  • Re: [VOTE] Release Apache Pulsar 5.0.0-M2 based on 5.0.0-M2-candidate-1 Lari Hotari
• Free, open-source AI chat tool - Ptero (Apache 2.0) Facha Nf
  • Re: Free, open-source AI chat tool - Ptero (Apache 2.0) Lari Hotari
• [DISCUSS] PIP-494: Scalable Topics Client Specification — authoritative reference and change process Matteo Merli
• [DISCUSS] Go Functions custom metric collectors — API shape for PIP-less enhancement (issue #26403) Kritharth Shetty
• [ANNOUNCE] Apache Pulsar C# Client DotPulsar 5.3.3 released David Jensen
• [DISCUSS] Cherry-pick PIP-492 to branch-4.0 and branch-4.2 guo jiwei
  • Re: [DISCUSS] Cherry-pick PIP-492 to branch-4.0 and branch-4.2 Baodi Shi
  • Re: [DISCUSS] Cherry-pick PIP-492 to branch-4.0 and branch-4.2 Tao Jiuming
• [RESULT][VOTE] Apache Pulsar DotPulsar 5.3.3 released David Jensen
• [DISCUSS] PIP-493: Key-ordered negative acknowledgement for Key_Shared subscriptions Lari Hotari
• [VOTE] DotPulsar Release 5.3.3-rc.1 David Jensen
  • Re: [VOTE] DotPulsar Release 5.3.3-rc.1 David Jensen
  • Re: [VOTE] DotPulsar Release 5.3.3-rc.1 Daniel Blankensteiner
  • Re: [VOTE] DotPulsar Release 5.3.3-rc.1 Lari Hotari
• [NOTICE] Avro 1.12.1/1.12.2 security hardening breaks reflection-based schemas - impact on Pulsar and on client applications Lari Hotari
  • Re: [NOTICE] Avro 1.12.1/1.12.2 security hardening breaks reflection-based schemas - impact on Pulsar and on client applications Lari Hotari
• [VOTE] PIP-492: Add pulsar_subscription_storage_backlog_age_seconds metric guo jiwei
  • Re: [VOTE] PIP-492: Add pulsar_subscription_storage_backlog_age_seconds metric Tao Jiuming
  • Re: [VOTE] PIP-492: Add pulsar_subscription_storage_backlog_age_seconds metric Baodi Shi
  • Re: [VOTE] PIP-492: Add pulsar_subscription_storage_backlog_age_seconds metric PengHui Li
• [DISCUSS] PIP-492: Add pulsar_subscription_storage_backlog_age_seconds metric guo jiwei
  • Re: [DISCUSS] PIP-492: Add pulsar_subscription_storage_backlog_age_seconds metric Baodi Shi
  • Re: [DISCUSS] PIP-492: Add pulsar_subscription_storage_backlog_age_seconds metric Tao Jiuming
• [DISCUSS] PIP-491: Prevent Delivery Stalls by Making the Client Return Exactly the Permits Used by the Broker void-ptr974
• [ANNOUNCE] Apache Pulsar C# Client DotPulsar 5.3.2 released David Jensen
• [RESULT][VOTE] Apache Pulsar DotPulsar 5.3.2 released David Jensen
• [VOTE] PIP-470: Close inactive topics without deleting their data PengHui Li
  • Re: [VOTE] PIP-470: Close inactive topics without deleting their data Tao Jiuming
  • Re: [VOTE] PIP-470: Close inactive topics without deleting their data Lari Hotari
  • Re: [VOTE] PIP-470: Close inactive topics without deleting their data Yubiao Feng
  • Re: [VOTE] PIP-470: Close inactive topics without deleting their data PengHui Li
• [VOTE] DotPulsar Release 5.3.2-rc.1 David Jensen
  • Re: [VOTE] DotPulsar Release 5.3.2-rc.1 Lari Hotari
  • Re: [VOTE] DotPulsar Release 5.3.2-rc.1 David Jensen
  • Re: [VOTE] DotPulsar Release 5.3.2-rc.1 Daniel Blankensteiner
• Feedback requested on issue #26161 Ryan Azzopardi
• [ANNOUNCE] Apache Pulsar 4.2.4 released Lari Hotari
• [ANNOUNCE] Apache Pulsar 4.0.13 released Lari Hotari
• [VOTE] Release Apache Pulsar 4.0.13 based on 4.0.13-candidate-1 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 4.0.13 based on 4.0.13-candidate-1 Baodi Shi
  • Re: [VOTE] Release Apache Pulsar 4.0.13 based on 4.0.13-candidate-1 Zixuan Liu
  • 回复： [VOTE] Release Apache Pulsar 4.0.13 based on 4.0.13-candidate-1 void-ptr974
  • Re: [VOTE] Release Apache Pulsar 4.0.13 based on 4.0.13-candidate-1 Pavel Zeger
  • Re: [VOTE] Release Apache Pulsar 4.0.13 based on 4.0.13-candidate-1 David Jensen
  • Re: [VOTE] Release Apache Pulsar 4.0.13 based on 4.0.13-candidate-1 Yike Xiao
  • Re: [VOTE] Release Apache Pulsar 4.0.13 based on 4.0.13-candidate-1 Lari Hotari
• [VOTE] Release Apache Pulsar 4.2.4 based on 4.2.4-candidate-1 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 4.2.4 based on 4.2.4-candidate-1 Baodi Shi
  • Re: [VOTE] Release Apache Pulsar 4.2.4 based on 4.2.4-candidate-1 Zixuan Liu
  • 回复： [VOTE] Release Apache Pulsar 4.2.4 based on 4.2.4-candidate-1 void-ptr974
  • Re: [VOTE] Release Apache Pulsar 4.2.4 based on 4.2.4-candidate-1 Pavel Zeger
  • Re: [VOTE] Release Apache Pulsar 4.2.4 based on 4.2.4-candidate-1 David Jensen
  • Re: [VOTE] Release Apache Pulsar 4.2.4 based on 4.2.4-candidate-1 Yike Xiao
  • Re: [VOTE] Release Apache Pulsar 4.2.4 based on 4.2.4-candidate-1 Lari Hotari
• [VOTE] PIP-484: Expose Window Interface for WindowFunction Processing Dream95
  • Re: [VOTE] PIP-484: Expose Window Interface for WindowFunction Processing Lari Hotari
  • Re: [VOTE] PIP-484: Expose Window Interface for WindowFunction Processing Lari Hotari
  • Re: [VOTE] PIP-484: Expose Window Interface for WindowFunction Processing david kjerrumgaard
• [DISCUSS] Pulsar releases 4.0.13 and 4.2.4 Lari Hotari
• [ANNOUNCE] Apache Pulsar Go Client 0.21.0 released Zike Yang
• [DISCUSS] PIP-490: Zero-downtime token signing-key rotation for the built-in JWT provider Pavel Zeger
• [VOTE] Pulsar Client Go Release 0.21.0 Candidate 1 Zike Yang
  • Re: [VOTE] Pulsar Client Go Release 0.21.0 Candidate 1 Yunze Xu
  • Re: [VOTE] Pulsar Client Go Release 0.21.0 Candidate 1 void-ptr974
  • Re: [VOTE] Pulsar Client Go Release 0.21.0 Candidate 1 Pavel Zeger
  • Re: [VOTE] Pulsar Client Go Release 0.21.0 Candidate 1 Matteo Merli
  • Re: [VOTE] Pulsar Client Go Release 0.21.0 Candidate 1 Zike Yang
• [DISCUSS] Release Pulsar Go Client 0.21.0 Zike Yang
  • Re: [DISCUSS] Release Pulsar Go Client 0.21.0 Pavel Zeger
• [ANNOUNCE] Apache Pulsar Helm Chart version 4.7.0 Released Lari Hotari
• pulsar-connectors: integration-test + bug-fix pass (32 PRs), and two decisions to weigh David Kjerrumgaard via dev
• [VOTE] PIP-478: Asynchronous v5 client authentication plugin interfaces and TLS material provider plugin interface Lari Hotari
  • Re: [VOTE] PIP-478: Asynchronous v5 client authentication plugin interfaces and TLS material provider plugin interface Matteo Merli
  • Re: [VOTE] PIP-478: Asynchronous v5 client authentication plugin interfaces and TLS material provider plugin interface Ruimin MA
  • Re: [VOTE] PIP-478: Asynchronous v5 client authentication plugin interfaces and TLS material provider plugin interface Lari Hotari
• [VOTE] Release Apache Pulsar Helm Chart 4.7.0 based on 4.7.0-candidate-1 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar Helm Chart 4.7.0 based on 4.7.0-candidate-1 Pavel Zeger
  • Re: [VOTE] Release Apache Pulsar Helm Chart 4.7.0 based on 4.7.0-candidate-1 David Jensen
  • Re: [VOTE] Release Apache Pulsar Helm Chart 4.7.0 based on 4.7.0-candidate-1 void-ptr974
  • Re: [VOTE] Release Apache Pulsar Helm Chart 4.7.0 based on 4.7.0-candidate-1 Zixuan Liu
  • Re: [VOTE] Release Apache Pulsar Helm Chart 4.7.0 based on 4.7.0-candidate-1 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar Helm Chart 4.7.0 based on 4.7.0-candidate-1 Lari Hotari
• [DISCUSS] PIP-489: FIPS 140-3 compliance mode for Apache Pulsar david kjerrumgaard
  • Re: [DISCUSS] PIP-489: FIPS 140-3 compliance mode for Apache Pulsar Lari Hotari
  • Re: [DISCUSS] PIP-489: FIPS 140-3 compliance mode for Apache Pulsar Lari Hotari
• [ANNOUNCE] Apache Pulsar 4.2.3 released Lari Hotari
• [ANNOUNCE] Apache Pulsar 4.0.12 released Lari Hotari
• [ANNOUNCE] Apache Pulsar Client Python 3.13.0 released Yunze Xu
• [DISCUSS] PIP-488: Pluggable authentication audit-event hook Pavel Zeger
• [VOTE] Release Apache Pulsar 4.0.12 based on 4.0.12-candidate-2 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 4.0.12 based on 4.0.12-candidate-2 guo jiwei
  • Re: [VOTE] Release Apache Pulsar 4.0.12 based on 4.0.12-candidate-2 David Jensen
  • Re: [VOTE] Release Apache Pulsar 4.0.12 based on 4.0.12-candidate-2 Zixuan Liu
  • Re: [VOTE] Release Apache Pulsar 4.0.12 based on 4.0.12-candidate-2 Pavel Zeger
  • Re: [VOTE] Release Apache Pulsar 4.0.12 based on 4.0.12-candidate-2 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 4.0.12 based on 4.0.12-candidate-2 void-ptr974
• [VOTE] Release Apache Pulsar 4.2.3 based on 4.2.3-candidate-2 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 4.2.3 based on 4.2.3-candidate-2 guo jiwei
  • Re: [VOTE] Release Apache Pulsar 4.2.3 based on 4.2.3-candidate-2 David Jensen
  • Re: [VOTE] Release Apache Pulsar 4.2.3 based on 4.2.3-candidate-2 Zixuan Liu
  • Re: [VOTE] Release Apache Pulsar 4.2.3 based on 4.2.3-candidate-2 Pavel Zeger
  • Re: [VOTE] Release Apache Pulsar 4.2.3 based on 4.2.3-candidate-2 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 4.2.3 based on 4.2.3-candidate-2 void-ptr974
• [VOTE] PIP-485: Configurable mTLS principal mapping (SAN sources and DN mapping rules) Pavel Zeger
• [VOTE] PIP-487: add event count metrics for InflightReadsLimiter acquire and release operations yubiao
  • Re: [VOTE] PIP-487: add event count metrics for InflightReadsLimiter acquire and release operations Yunze Xu
  • Re: [VOTE] PIP-487: add event count metrics for InflightReadsLimiter acquire and release operations Lari Hotari
  • Re: [VOTE] PIP-487: add event count metrics for InflightReadsLimiter acquire and release operations Baodi Shi
  • Re: [VOTE] PIP-487: add event count metrics for InflightReadsLimiter acquire and release operations Yubiao Feng
  • Re: [VOTE] PIP-487: add event count metrics for InflightReadsLimiter acquire and release operations void-ptr974
• [VOTE] Pulsar Client Python Release 3.13.0 Candidate 1 Yunze Xu
  • Re: [VOTE] Pulsar Client Python Release 3.13.0 Candidate 1 Baodi Shi
  • Re: [VOTE] Pulsar Client Python Release 3.13.0 Candidate 1 Zike Yang
  • Re: [VOTE] Pulsar Client Python Release 3.13.0 Candidate 1 Yunze Xu
• [VOTE] Release Apache Pulsar 4.0.12 based on 4.0.12-candidate-1 Lari Hotari
  • Re: [VOTE] Release Apache Pulsar 4.0.12 based on 4.0.12-candidate-1 Zixuan Liu
  • Re: [VOTE] Release Apache Pulsar 4.0.12 based on 4.0.12-candidate-1 Pavel Zeger
  • Re: [VOTE] Release Apache Pulsar 4.0.12 based on 4.0.12-candidate-1 Yike Xiao

• Earlier messages