[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-03-31 Thread Bruno Cadonna (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17515311#comment-17515311 ] Bruno Cadonna commented on KAFKA-9366: -- [~akansh] As stated in the mailing list thread [~showuon]

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-03-31 Thread Akansh Shandilya (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17515252#comment-17515252 ] Akansh Shandilya commented on KAFKA-9366: - [~showuon] I appreciate your dedication and efforts to

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-03-24 Thread Bruno Cadonna (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17511814#comment-17511814 ] Bruno Cadonna commented on KAFKA-9366: -- [~brandonk] Actually, I removed it from the 3.2.0 release

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-03-23 Thread Luke Chen (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17511547#comment-17511547 ] Luke Chen commented on KAFKA-9366: -- [~brandonk]  and all, we are aware of the log4j CVE issue is

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-03-23 Thread Brandon Kimbrough (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17511262#comment-17511262 ] Brandon Kimbrough commented on KAFKA-9366: -- [~cadonna] did I really just see that you kicked

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-03-17 Thread Ron Craig (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17508256#comment-17508256 ] Ron Craig commented on KAFKA-9366: -- Perfect!  Thanks, [~dongjin] . > Upgrade log4j to log4j2 >

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-03-17 Thread Dongjin Lee (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17508199#comment-17508199 ] Dongjin Lee commented on KAFKA-9366: [~roncraig] Sorry for being late. the PR is now updated with

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-03-14 Thread Ron Craig (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17506307#comment-17506307 ] Ron Craig commented on KAFKA-9366: -- Hi, [~dongjin] please can you confirm that the latest available

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-02-20 Thread Muthuveerappan (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17495329#comment-17495329 ] Muthuveerappan commented on KAFKA-9366: --- Thanks :) > Upgrade log4j to log4j2 >

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-02-15 Thread Ben Hines (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17492459#comment-17492459 ] Ben Hines commented on KAFKA-9366: -- Seems scheduled for April. 

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-02-15 Thread Muthuveerappan (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17492445#comment-17492445 ] Muthuveerappan commented on KAFKA-9366: ---  If this issue will be fixed in 3.2.0 ., what the ETA for

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-02-09 Thread Akansh Shandilya (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17489791#comment-17489791 ] Akansh Shandilya commented on KAFKA-9366: - Voting has been done by multiple users, and more are

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-02-03 Thread Indupriya (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17486434#comment-17486434 ] Indupriya commented on KAFKA-9366: -- Hi [~dongjin]  Could you please help us any approximate dates for

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-02-03 Thread Indupriya (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17486380#comment-17486380 ] Indupriya commented on KAFKA-9366: -- Can Anyone suggests fix for this vulnerabilities in kafka by the use

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-02-03 Thread Dongjin Lee (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17486321#comment-17486321 ] Dongjin Lee commented on KAFKA-9366: Hi [~noonbs], this issue will be resolved with KAFKA-12399. I

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-02-02 Thread Fabrice Bauzac-Stehly (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17485878#comment-17485878 ] Fabrice Bauzac-Stehly commented on KAFKA-9366: -- https://kafka.apache.org/cve-list claims to

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-01-18 Thread Warren Grunbok (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17478116#comment-17478116 ] Warren Grunbok commented on KAFKA-9366: --- I'm also looking for an official release date with the

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-01-03 Thread Dongjin Lee (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17468340#comment-17468340 ] Dongjin Lee commented on KAFKA-9366: [~Ashoking] No, I can't certain it. Please have a look on the

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2022-01-03 Thread ashok talari (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17468014#comment-17468014 ] ashok talari commented on KAFKA-9366: - Hi Dongjin Lee,   Could you please let us know if any

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2021-12-18 Thread Dongjin Lee (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17461807#comment-17461807 ] Dongjin Lee commented on KAFKA-9366: [~tarungoswami] I can't give you any guarantee but,

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2021-12-15 Thread Tarun Goswami (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17460408#comment-17460408 ] Tarun Goswami commented on KAFKA-9366: -- What is the ETA for this issue resolution! > Upgrade log4j

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2021-12-15 Thread Dongjin Lee (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17460377#comment-17460377 ] Dongjin Lee commented on KAFKA-9366: [~showuon] Sure. The PR is now updated to handle log4j2 2.16.0.

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2021-12-13 Thread Luke Chen (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17458219#comment-17458219 ] Luke Chen commented on KAFKA-9366: -- Please upgrade to Log4j to 2.15.0 or newer for CVE-2021-44228.

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2021-11-02 Thread David Jacot (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17437337#comment-17437337 ] David Jacot commented on KAFKA-9366: Moved the target release to the next one as the PR was not

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2021-09-07 Thread Ashish Patil (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17411480#comment-17411480 ] Ashish Patil commented on KAFKA-9366: - Thanks, [~dongjin] > Upgrade log4j to log4j2 >

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2021-09-05 Thread Dongjin Lee (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17410283#comment-17410283 ] Dongjin Lee commented on KAFKA-9366: ALL // Sorry for being late. This KIP was originally passed for

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2021-09-02 Thread Ashish Patil (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17408666#comment-17408666 ] Ashish Patil commented on KAFKA-9366: - Hi Guys Is there any plan to fix this issue soon? Thanks

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2021-09-01 Thread yale (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17408133#comment-17408133 ] yale commented on KAFKA-9366: - May I kindly ask about the plan to upgrade log4j to version 2.x? I see that

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2021-07-14 Thread Dongjin Lee (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17380951#comment-17380951 ] Dongjin Lee commented on KAFKA-9366: [~kkonstantine] Got it. > Upgrade log4j to log4j2 >

[jira] [Commented] (KAFKA-9366) Upgrade log4j to log4j2

2021-07-14 Thread Konstantine Karantasis (Jira)
[ https://issues.apache.org/jira/browse/KAFKA-9366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17380874#comment-17380874 ] Konstantine Karantasis commented on KAFKA-9366: --- This feature was not approved on time for