Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Vulnerabilities are being reported for kafka container images #225

Open
dkirrane opened this issue May 16, 2023 · 3 comments
Open

Vulnerabilities are being reported for kafka container images #225

dkirrane opened this issue May 16, 2023 · 3 comments

Comments

@dkirrane
Copy link

dkirrane commented May 16, 2023 •
edited

If we deploy the latest 7.3.x container image e.g. confluentinc/cp-kafka-connect:7.3.3 these CVEs are showing:

  • CVE-2023-0361 - Red Hat Update for gnutls (RHSA-2023:1569)
  • CVE-2023-21930 - Azul Java Multiple Vulnerabilities Security Update April 2023
@janjwerner-confluent
Copy link
Member

@dkirrane
Thank you for raising bring this up. We expect to address those in the upcoming quarterly patch release.

@dkirrane
Copy link
Author

dkirrane commented Jun 8, 2023

this looks like it's fixed now in latest pull of confluentinc/cp-kafka-connect:7.3.3

@janjwerner-confluent
Copy link
Member

Azul Java packages will be update in Q3 2023.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@dkirrane @janjwerner-confluent