librdkafka

librdkafka copied to clipboard

Update openSSL libraries to versions not affected by CVE-2024-12797

1

We are using the Nuget package Confluent.Kafka version 2.10.0 in our .NET application. That package depends on librdkafka.redist >= 2.10.0. librdkafka.redist version 2.10.0 ships OpenSSL libraries libssl and libcrypto-3, each...

balpen-serrala

Update embedded cJSON for security fixes

1

librdkafka currently [embeds](https://github.com/confluentinc/librdkafka/commits/master/src/cJSON.c) a copy of cJSON 1.7.14. Please update this copy to the [latest version](https://github.com/DaveGamble/cJSON/releases), currently 1.7.18, which contains multiple CVE fixes related to improper handling of null pointers.

jre21

devel assert in `rk->rk_ts_last_poll_end >= rk->rk_ts_last_poll_start` fails in test 0056 because queues are forwarded. Poll ratio calculation should be per-queue instead of per-instance to handle the case where partition queues...

emasab

Hey there, This issue is referenced in the following [confluent Kafka python client issue](https://github.com/confluentinc/confluent-kafka-python/issues/1398). It was assigned a year and a half ago, but not fixed. Basically, the problem is...

yungFundamental

Use CURL OPTS for OIDC CA

1

anchitj

[KIP-1139] Add support for OAuth jwt-bearer grant type

1

anchitj

[trivup 0.13.0] support for JWT bearer grant type

1

emasab

We have recently stumbled over a segfault in librdkafka. Upon investigation we found that the segfault occurs in [rd_kafka_broker_add_logical](https://github.com/MaterializeInc/librdkafka/blob/58d97262126db237bc3221765fc18a2a8ef47ce5/src/rdkafka_broker.c#L5087C20-L5087C47). What happens is that `rd_kafka_broker_add` returns NULL for whatever reason (likely...

teskje

Fix https://github.com/confluentinc/librdkafka/issues/4348

1

With this changes we are able to use Redpanda on Kubernetes installed from the operator without any problem. I seems that solve issue 4348. Please provides feedback about it

mk8

rd_kafka_Uuid_base64str crash on rd_strlcpy

2

it's running 2.8. callstack: ``` ucrtbased.dll!strlen() Line 70 Unknown bgs_server.exe!rd_strlcpy(char * dst, const char * src, unsigned __int64 dstsize) Line 40 C > bgs_server.exe!rd_kafka_Uuid_base64str(const rd_kafka_Uuid_s * uuid) Line 5482 C...

ericwuseattle