Chapter 5. Fixed issues
Chapter 5. Fixed issues The issues fixed in AMQ Streams 1.7 are shown in the following table. For details of the issues fixed in Kafka 2.7.0, refer to the Kafka 2.7.0 Release Notes . Issue Number Description ENTMQST-1561 OpenSSL tasks should be executed on separate worker executor and not on the main thread ENTMQST-1607 Check the log.message.format.version and inter.broker.protocol.version from the brokers during upgrade ENTMQST-1631 Topic Operator sometimes renames KafkaTopics ENTMQST-1676 Simplify Kafka upgrades and downgrades ENTMQST-1914 Move to Java 11 language level ENTMQST-2030 If the bin/kafka-acls.sh utility is used to add or remove an ACL, the operation is successful but a warning is generated ENTMQST-2085 All KafkaTopic custom resources are deleted and recreated when restarting kafka and zookeeper at the same time ENTMQST-2184 Metrics reporter not able to produce metrics when Kafka min.insync.replicas is greater than 1 ENTMQST-2188 MirrorMaker: Enable synchronization of offsets to the consumer group on the target cluster ENTMQST-2269 kafka-configs.sh is deprecating --zookeeper option but does not provide alternative functionality to list configs for users ENTMQST-2295 Watching the wrong reconciliations for metrics in the Topic Operator ENTMQST-2311 Improve configuration of network policies ENTMQST-2335 Run the ConnectS2I deployment with tini init ENTMQST-2386 Adding or removing JBOD volumes not working as expected ENTMQST-2472 Replacing namespace in Prometheus operator bundle file produces invalid YAML ENTMQST-2480 Inconsistent use of CPU metric in Grafana dashboards ENTMQST-2483 KafkaConnect Build: Declarative management of connector plugins in Kafka Connect custom resource ENTMQST-2525 Add annotations to perform connector/task restart operations ENTMQST-2529 Kafka Exporter dashboard does not auto-select namespace and cluster name ENTMQST-2547 Network policies not properly configured when metrics ConfigMap is used ENTMQST-2548 User-certificate renewal never triggered when it expires independently on the CA ENTMQST-2550 Cruise Control Grafana dashboard presentation is affected when Cruise Control pod is rolled or deleted ENTMQST-2595 Topic Operator fails to create a topic when replica or partition count is decreased ENTMQST-2625 JMX configuration issues cause port already in use error ENTMQST-2636 OAuth NullPointerException when using 'keycloak' authorization with 'resource' permissions ENTMQST-2643 Use the ISO-8601 timestamp standard for Kafka resource status Table 5.1. Fixed common vulnerabilities and exposures (CVEs) Issue Number Title Description ENTMQST-2334 CVE-2020-25649 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) [amq-st-1] A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.