Skip to content

KAFKA-20446 KAFKA-20447: Fix CVE-2026-28390 and CVE-2026-22184#22053

Merged
chia7712 merged 2 commits intoapache:trunkfrom
FrankYang0529:KAFKA-20446
Apr 14, 2026
Merged

KAFKA-20446 KAFKA-20447: Fix CVE-2026-28390 and CVE-2026-22184#22053
chia7712 merged 2 commits intoapache:trunkfrom
FrankYang0529:KAFKA-20446

Conversation

@FrankYang0529
Copy link
Copy Markdown
Member

@FrankYang0529 FrankYang0529 commented Apr 14, 2026

Fix CVE for libcrypto3, libssl3, and zlib. We can remove these if alpine
update default version.

Reviewers: Chia-Ping Tsai chia7712@gmail.com, Ken Huang
s7133700@gmail.com, nileshkumar3 nileshkumar3@gmail.com

Signed-off-by: PoAn Yang <payang@apache.org>
@github-actions github-actions bot added docker Official Docker image small Small PRs labels Apr 14, 2026
org.opencontainers.image.authors="Apache Kafka"

RUN apk update ; \
apk upgrade --no-cache libcrypto3 libssl3 zlib; \
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add comments for this update

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added it. Thank you.

Signed-off-by: PoAn Yang <payang@apache.org>
Copy link
Copy Markdown
Collaborator

@m1a2st m1a2st left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Copy Markdown
Contributor

@nileshkumar3 nileshkumar3 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@chia7712 chia7712 merged commit 23bce3d into apache:trunk Apr 14, 2026
24 checks passed
chia7712 pushed a commit that referenced this pull request Apr 14, 2026
Fix CVE for libcrypto3, libssl3, and zlib. We can remove these if alpine
update default version.

Reviewers: Chia-Ping Tsai <chia7712@gmail.com>, Ken Huang
 <s7133700@gmail.com>
chia7712 pushed a commit to chia7712/kafka that referenced this pull request Apr 14, 2026
…e#22053)

Fix CVE for libcrypto3, libssl3, and zlib. We can remove these if alpine
update default version.

Reviewers: Chia-Ping Tsai <chia7712@gmail.com>, Ken Huang
 <s7133700@gmail.com>
@FrankYang0529 FrankYang0529 deleted the KAFKA-20446 branch April 14, 2026 23:35
nileshkumar3 pushed a commit to nileshkumar3/kafka that referenced this pull request Apr 15, 2026
…e#22053)

Fix CVE for libcrypto3, libssl3, and zlib. We can remove these if alpine
update default version.

Reviewers: Chia-Ping Tsai <chia7712@gmail.com>, Ken Huang
 <s7133700@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

docker Official Docker image small Small PRs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants