> On May 16, 2025, at 12:04 AM, Sahil Sharma D <sahil.d.sharma@ericsson.com.INVALID> wrote:
>
> Hi Team,
>
> I noticed that Jetty has been upgraded to version 11.x in Kafka 4.0.0. According to the Jetty website, version 11.x has already reached its end of life (EOL). Could you clarify how any future issues or CVEs related to version 11.x will be addressed?
>
> Additionally, I would like to know if there is a plan to upgrade Jetty to version 12.x in upcoming releases.
Hi Sahil, I think your premise may be mistaken - I am no authority on the project, but some searching around leads you to
https://cwiki.apache.org/confluence/display/KAFKA/KIP-1032%3A+Upgrade+to+Jakarta+and+JavaEE+10+in+Kafka+4.0
which is implemented as
https://github.com/apache/kafka/pull/16754
indicating that Kafka 4 indeed already uses Jetty 12
Best,
Steven
>
> Hi Team,
>
> I noticed that Jetty has been upgraded to version 11.x in Kafka 4.0.0. According to the Jetty website, version 11.x has already reached its end of life (EOL). Could you clarify how any future issues or CVEs related to version 11.x will be addressed?
>
> Additionally, I would like to know if there is a plan to upgrade Jetty to version 12.x in upcoming releases.
Hi Sahil, I think your premise may be mistaken - I am no authority on the project, but some searching around leads you to
https://cwiki.apache.org/confluence/display/KAFKA/KIP-1032%3A+Upgrade+to+Jakarta+and+JavaEE+10+in+Kafka+4.0
which is implemented as
https://github.com/apache/kafka/pull/16754
indicating that Kafka 4 indeed already uses Jetty 12
Best,
Steven
Comments
Post a Comment