[ https://issues.apache.org/jira/browse/KAFKA-14897?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Gray updated KAFKA-14897: ------------------------- Description: According to KAFKA-14696, CVE-2023-25194 was addressed in version 3.4.0 but I see nothing about the task or CVE in the release notes. Is this just a miss or is the "fix version" on the ticket wrong? Thanks. (was: According to KAFKA-14696, CVE-2023-25194 was fixed in version 3.4.0 but I see nothing about the task or CVE in the release notes. Is this just a miss or is the "fix version" on the ticket wrong? Thanks.) > 3.4.0 release notes do not mention fixing KAFKA-14696 > ----------------------------------------------------- > > Key: KAFKA-14897 > URL: https://issues.apache.org/jira/browse/KAFKA-14897 > Project: Kafka > Issue Type: Task > Components: documentation > Affects Versions: 3.4.0 > Reporter: Gray > Priority: Minor > Labels: release-notes > > According to KAFKA-14696, CVE-2023-25194 was addressed in version 3.4.0 but I > see nothing about the task or CVE in the release notes. Is this just a miss > or is the "fix version" on the ticket wrong? Thanks. -- This message was sent by Atlassian Jira (v8.20.10#820010)