[ https://issues.apache.org/jira/browse/KAFKA-9996?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ismael Juma resolved KAFKA-9996. -------------------------------- Fix Version/s: 2.5.1 2.4.2 2.6.0 Resolution: Fixed > upgrade zookeeper to 3.5.8 to address security vulnerabilities > -------------------------------------------------------------- > > Key: KAFKA-9996 > URL: https://issues.apache.org/jira/browse/KAFKA-9996 > Project: Kafka > Issue Type: Bug > Components: packaging > Affects Versions: 2.5.0 > Reporter: Emanuele Maccherani > Assignee: Ismael Juma > Priority: Major > Fix For: 2.6.0, 2.4.2, 2.5.1 > > > Kafka is now using zookeeper 3.5.7, which is affected by CVE-2020-8840 and > CVE-2020-9488. Those 2 are resolved in 3.5.8. -- This message was sent by Atlassian Jira (v8.3.4#803005)