OPENSUSE-SU-2022:0038-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 16 Feb 2022, 14:29
Last modified:04 Feb 2026, 03:30

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Feb 2022, 14:29
Published
Vulnerability first disclosed
04 Feb 2026, 03:30
Last Modified
Vulnerability information updated

Description

Security update for kafka This update for kafka, kafka-kit fixes following issues: - Remove JDBCAppender, JMSSink, chainsaw from log4j jars during build to prevent bsc#1194842, CVE-2022-23302, bsc#1194843, CVE-2022-23305, bsc#1194844, CVE-2022-23307 - Rebuild with kafka-kit change to Remove JMSAppender from log4j jars during build to prevent bsc#1193662, CVE-2021-4104

Affected Systems

  • opensuse•kafka-kit&distro=openSUSE Leap 15.3

    < 2.1.0-bp153.2.6.1

  • opensuse•kafka&distro=openSUSE Leap 15.3

    < 2.1.0-bp153.2.6.1

  • suse•kafka-kit&distro=SUSE Package Hub 15 SP3

    < 2.1.0-bp153.2.6.1

  • suse•kafka&distro=SUSE Package Hub 15 SP3

    < 2.1.0-bp153.2.6.1

References (9)