[jira] [Resolved] (KAFKA-13969) CVE-2022-24823 in netty 4.1.76.Final

2022-07-09 Thread Dongjin Lee (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-13969?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Dongjin Lee resolved KAFKA-13969. - Resolution: Duplicate > CVE-2022-24823 in netty 4.1.76.Final >

[GitHub] [kafka] dpcollins-google opened a new pull request, #12399: KAFKA-14063: Prevent malicious tiny payloads from causing OOMs with variably sized collections

2022-07-09 Thread GitBox
dpcollins-google opened a new pull request, #12399: URL: https://github.com/apache/kafka/pull/12399 When parsing code receives a payload for a variable length field where the length is specified in the code as some arbitrarily large number (assume INT32_MAX for example) this will

[jira] [Created] (KAFKA-14063) Kafka message parsing can cause ooms with small antagonistic payloads

2022-07-09 Thread Daniel Collins (Jira)
Daniel Collins created KAFKA-14063: -- Summary: Kafka message parsing can cause ooms with small antagonistic payloads Key: KAFKA-14063 URL: https://issues.apache.org/jira/browse/KAFKA-14063 Project:

[GitHub] [kafka] kirktrue commented on pull request #12398: KAFKA-14062: OAuth client token refresh fails with SASL extensions

2022-07-09 Thread GitBox
kirktrue commented on PR #12398: URL: https://github.com/apache/kafka/pull/12398#issuecomment-1179598843 Thanks for the feedback, @dajac!  > Could we add a unit test? Yes, I'd like to see that too. @emissionnebula: has the testing for this been mostly manual up to this

[GitHub] [kafka] dajac commented on pull request #12398: KAFKA-14062: OAuth client token refresh fails with SASL extensions

2022-07-09 Thread GitBox
dajac commented on PR #12398: URL: https://github.com/apache/kafka/pull/12398#issuecomment-1179598266 Could we add a unit test? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific

[GitHub] [kafka] kirktrue commented on pull request #12398: KAFKA-14062: OAuth client token refresh fails with SASL extensions

2022-07-09 Thread GitBox
kirktrue commented on PR #12398: URL: https://github.com/apache/kafka/pull/12398#issuecomment-1179594826 cc @omkreddy @YiDing-Duke @stanislavkozlovski @rite2nikhil @emissionnebula @ijuma -- This is an automated message from the Apache Git Service. To respond to the message, please log

[GitHub] [kafka] kirktrue opened a new pull request, #12398: KAFKA-14062: Remove SaslExtensions overridden equals() and hashCode() methods

2022-07-09 Thread GitBox
kirktrue opened a new pull request, #12398: URL: https://github.com/apache/kafka/pull/12398 What Kafka client is adding and removing the SASL extensions alternatively at the time of token refresh. During the window when the extensions are not present in the subject. If a

[jira] [Updated] (KAFKA-14062) OAuth client token refresh fails with SASL extensions

2022-07-09 Thread Kirk True (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-14062?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kirk True updated KAFKA-14062: -- Summary: OAuth client token refresh fails with SASL extensions (was: OAuth token refresh causes

[jira] [Created] (KAFKA-14062) OAuth token refresh causes client authentication to fail

2022-07-09 Thread Kirk True (Jira)
Kirk True created KAFKA-14062: - Summary: OAuth token refresh causes client authentication to fail Key: KAFKA-14062 URL: https://issues.apache.org/jira/browse/KAFKA-14062 Project: Kafka Issue

[GitHub] [kafka] hachikuji commented on pull request #12380: MINOR: Get rid of agent checks in Jenkinsfile

2022-07-09 Thread GitBox
hachikuji commented on PR #12380: URL: https://github.com/apache/kafka/pull/12380#issuecomment-1179582348 @showuon @ijuma @mumrah @dajac Thanks. I've removed these builds from the Jenkinsfile. I am not sure I know how to run them only against trunk. If one of you knows how to do that, let

[GitHub] [kafka] hachikuji commented on pull request #12390: KAFKA-14055; Txn markers should not be removed by matching records in the offset map

2022-07-09 Thread GitBox
hachikuji commented on PR #12390: URL: https://github.com/apache/kafka/pull/12390#issuecomment-1179580222 @junrao Thanks for reviewing. The ARM agent has been a bit unreliable. It looks like the ARM node has been offline for a while. There is some discussion

[GitHub] [kafka] dajac commented on pull request #12385: MINOR: Expose client information on RequestContext as additional public API beyond request logs (continuation of KIP 511)

2022-07-09 Thread GitBox
dajac commented on PR #12385: URL: https://github.com/apache/kafka/pull/12385#issuecomment-1179576258 @methodmissing We also expose a metric with the number of clients per software name and version. Have you already checked this out? -- This is an automated message from the Apache Git

[jira] [Commented] (KAFKA-13953) kafka Console consumer fails with CorruptRecordException

2022-07-09 Thread Doguscan Namal (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-13953?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17564575#comment-17564575 ] Doguscan Namal commented on KAFKA-13953: I put the part of the data that I was able to read.

[jira] [Updated] (KAFKA-14061) mirror-maker2: ability to store internal topics in one single Kafka cluster

2022-07-09 Thread Guram Savinov (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-14061?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Guram Savinov updated KAFKA-14061: -- Description: I run mm2 in dedicated mode (not in Kafka Connect). It's possible to replicate

[jira] [Updated] (KAFKA-14061) mirror-maker2: ability to store internal topics in one single Kafka cluster

2022-07-09 Thread Guram Savinov (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-14061?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Guram Savinov updated KAFKA-14061: -- Summary: mirror-maker2: ability to store internal topics in one single Kafka cluster (was:

[jira] [Created] (KAFKA-14061) Ability to store internal topics in one single Kafka cluster

2022-07-09 Thread Guram Savinov (Jira)
Guram Savinov created KAFKA-14061: - Summary: Ability to store internal topics in one single Kafka cluster Key: KAFKA-14061 URL: https://issues.apache.org/jira/browse/KAFKA-14061 Project: Kafka

[GitHub] [kafka] showuon commented on pull request #12381: KAFKA-13474: Allow reconfiguration of SSL certs for broker to controller connection

2022-07-09 Thread GitBox
showuon commented on PR #12381: URL: https://github.com/apache/kafka/pull/12381#issuecomment-1179518774 back port back to 3.2 branch. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific

[jira] [Updated] (KAFKA-13474) Regression in dynamic update of broker certificate

2022-07-09 Thread Luke Chen (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-13474?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Luke Chen updated KAFKA-13474: -- Fix Version/s: 3.2.1 > Regression in dynamic update of broker certificate >

[GitHub] [kafka] showuon merged pull request #12381: KAFKA-13474: Allow reconfiguration of SSL certs for broker to controller connection

2022-07-09 Thread GitBox
showuon merged PR #12381: URL: https://github.com/apache/kafka/pull/12381 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

[GitHub] [kafka] divijvaidya commented on pull request #12381: KAFKA-13474: Allow reconfiguration of SSL certs for broker to controller connection

2022-07-09 Thread GitBox
divijvaidya commented on PR #12381: URL: https://github.com/apache/kafka/pull/12381#issuecomment-1179497415 @showuon please take a look again when you get a chance. The test failures are unrelated. -- This is an automated message from the Apache Git Service. To respond to the message,