[ https://issues.apache.org/jira/browse/KAFKA-14897?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Gray updated KAFKA-14897: ------------------------- Summary: 3.4.0 release notes do not mention fixing KAFKA-14696 (was: 3.4.0 release notes does not mention fixing KAFKA-14696) > 3.4.0 release notes do not mention fixing KAFKA-14696 > ----------------------------------------------------- > > Key: KAFKA-14897 > URL: https://issues.apache.org/jira/browse/KAFKA-14897 > Project: Kafka > Issue Type: Task > Components: documentation > Affects Versions: 3.4.0 > Reporter: Gray > Priority: Minor > Labels: release-notes > > According to KAFKA-14696, CVE-2023-25194 was fixed in version 3.4.0 but I see > nothing about the task or CVE in the release notes. Is this just a miss or > is the "fix version" on the ticket wrong? Thanks. -- This message was sent by Atlassian Jira (v8.20.10#820010)