[KAFKA-14100] Upgrade vulnerable dependencies Kafka version 3.1.1 July 2022

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 2.8.1
• Fix Version/s: 3.0.1, 3.2.0, 3.1.1
• Labels: secutiry
• Assignee: Unassigned
• Reporter: Shivakumar
• Created: 25/Jul/22 06:48
• Updated: 05/Aug/22 21:20
• Resolved: 05/Aug/22 21:20

Description

CVE ID	Type	Severity	Packages	Package Version	CVSS	Fix Status
CVE-2022-2048	java	high	org.eclipse.jetty_jetty-io	9.4.44.v20210927	7.5	fixed in 11.0.9, 10.0.9, 9.4.47

Our security scan detected the above vulnerabilities

upgrade to correct versions for fixing vulnerabilities

Issue Links

• duplicates: KAFKA-14107 Upgrade Jetty for CVE fixes
• is a clone of: KAFKA-13658 Upgrade vulnerable dependencies jan 2022
• relates to: KAFKA-14107 Upgrade Jetty for CVE fixes