[ 
https://issues.apache.org/jira/browse/KAFKA-14897?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Gray updated KAFKA-14897:
-------------------------
    Description: According to KAFKA-14696, CVE-2023-25194 was addressed in 
version 3.4.0 but I see nothing about the task or CVE in the release notes.  Is 
this just a miss or is the "fix version" on the ticket wrong?  Thanks.  (was: 
According to KAFKA-14696, CVE-2023-25194 was fixed in version 3.4.0 but I see 
nothing about the task or CVE in the release notes.  Is this just a miss or is 
the "fix version" on the ticket wrong?  Thanks.)

> 3.4.0 release notes do not mention fixing KAFKA-14696
> -----------------------------------------------------
>
>                 Key: KAFKA-14897
>                 URL: https://issues.apache.org/jira/browse/KAFKA-14897
>             Project: Kafka
>          Issue Type: Task
>          Components: documentation
>    Affects Versions: 3.4.0
>            Reporter: Gray
>            Priority: Minor
>              Labels: release-notes
>
> According to KAFKA-14696, CVE-2023-25194 was addressed in version 3.4.0 but I 
> see nothing about the task or CVE in the release notes.  Is this just a miss 
> or is the "fix version" on the ticket wrong?  Thanks.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to