Metadata Refresh and TimeoutException when MAX_BLOCK_MS_CONFIG set 0

2022-09-19 Thread Bhavesh Mistry
Hello Kafka Team, We have an environment where Kafka Broker can go down for whatever reason. Hence, we had configured MAX_BLOCK_MS_CONFIG=0 because we wanted to drop messages when brokers were NOT available. Now the issue is we get data loss due to METADATA not being available and get

CVE-2022-34917: Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers

2022-09-19 Thread Manikumar
Severity: High Description: A security vulnerability has been identified in Apache Kafka. It affects all releases since 2.8.0. The vulnerability allows malicious unauthenticated clients to allocate large amounts of memory on brokers. This can lead to brokers hitting OutOfMemoryException and

[ANNOUNCE] Apache Kafka 3.2.3

2022-09-19 Thread Manikumar
The Apache Kafka community is pleased to announce the release for Apache Kafka 3.2.3 Apache Kafka 3.2.3 is a bugfix release and it contains important security fixes. This also fixes 7 issues since the 3.2.1 release. Please see the release notes for more information. All of the changes in this

[ANNOUNCE] Apache Kafka 3.1.2

2022-09-19 Thread Manikumar
The Apache Kafka community is pleased to announce the release for Apache Kafka 3.1.2 Apache Kafka 3.1.2 is a bugfix release and it contains important security fixes. It also fixes 4 issues since the 3.1.1 release. Please see the release notes for more information. All of the changes in this

[ANNOUNCE] Apache Kafka 3.0.2

2022-09-19 Thread Manikumar
The Apache Kafka community is pleased to announce the release for Apache Kafka 3.0.2 Apache Kafka 3.0.2 is a bugfix release and it contains important security fixes. It also fixes 10 issues since the 3.0.1 release. Please see the release notes for more information. All of the changes in this

[ANNOUNCE] Apache Kafka 2.8.2

2022-09-19 Thread Manikumar
The Apache Kafka community is pleased to announce the release for Apache Kafka 2.8.2 Apache Kafka 2.8.2 is a bugfix release and it contains important security fixes. It also fixes 11 issues since the 2.8.1 release. Please see the release notes for more information. All of the changes in this