Kafka

Hi Vivek The next 4.4.0 RC, which includes the updates you mentioned, is being prepared. We will let you know once the artifacts are uploaded. Best, Chia-Ping > Vivek Agarwal B via dev <dev@kafka.apache.org> 於 2026年9月29日 上午11:49 寫道： > > Hi Chia-Ping, > > Thank you for considering this request. > > Could you please let me know when the formal release of Kafka 4.4.0 is expected to be available? > > Our product currently uses Kafka 4.3.0, and we plan to migrate to Kafka 4.4.0, as several vulnerabilities have been addressed in the newer version. Since our product release is approaching, we would like to integrate and test Kafka 4.4.0 to identify and address any migration or functionality issues. > > Could you please provide us with a test build based on the latest Kafka 4.4.0 release candidate, if available? > > Regards > Vivek > > -----Original Message----- > From: Chia-Ping Tsai <chia7712@apac...

Hi Chia-Ping, Thank you for considering this request. Could you please let me know when the formal release of Kafka 4.4.0 is expected to be available? Our product currently uses Kafka 4.3.0, and we plan to migrate to Kafka 4.4.0, as several vulnerabilities have been addressed in the newer version. Since our product release is approaching, we would like to integrate and test Kafka 4.4.0 to identify and address any migration or functionality issues. Could you please provide us with a test build based on the latest Kafka 4.4.0 release candidate, if available? Regards Vivek -----Original Message----- From: Chia-Ping Tsai <chia7712@apache.org> Sent: 28 September 2026 21:49 To: users@kafka.apache.org Subject: Re: 4.4.0 Release Manager [You don't often get email from chia7712@apache.org. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ] Hi Vivek I have backported the Jetty and zstd-jni updates to the 4.4 branch. Also, I op...

Hi Vivek I have backported the Jetty and zstd-jni updates to the 4.4 branch. Also, I opened https://issues.apache.org/jira/browse/KAFKA-21175 to update Jackson for the 4.4 branch. They will be included in 4.4.0. Best, Chia-Ping On 2026/09/28 15:44:07 Vivek Agarwal B via users wrote: > Hi Chia-Ping, > > Although some of these vulnerabilities may not be directly involved in Kafka’s execution path, it is difficult to rule out potential exploitation by an attacker. Therefore, I request that they be addressed in Kafka v4.4.0 itself to avoid additional remediation activities later. > > Regards > Vivek > > ________________________________ > From: Chia-Ping Tsai <chia7712@apache.org> > Sent: Monday, September 28, 2026 8:51 PM > To: dev@kafka.apache.org <dev@kafka.apache.org> > Subject: RE: 4.4.0 Release Manager > > [You don't often get email from chia7712@apache.org. Learn why this is important at https://aka...