[ https://issues.apache.org/jira/browse/KAFKA-16471?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17834229#comment-17834229 ]
Chia-Ping Tsai commented on KAFKA-16471: ---------------------------------------- {quote} perhaps we backport KAFKA-16305 to 3.7 and leave out 3.6 for now? {quote} yep, please backport KAFKA-16305 to 3.7. And you are right, we can leave out 3.6 and let 3.6.3 (if users require it) RM (if there is a volunteer) to cherry-pick in the future. > SslTransportLayer may leak SSLEngine resources > ---------------------------------------------- > > Key: KAFKA-16471 > URL: https://issues.apache.org/jira/browse/KAFKA-16471 > Project: Kafka > Issue Type: Bug > Components: network > Affects Versions: 3.7.0, 3.6.1 > Reporter: Gaurav Narula > Assignee: Gaurav Narula > Priority: Major > Fix For: 3.8.0, 3.7.1 > > > {{SslTransportLayer}} does not invoke {{SSLEngine::closeInbound}} in > {{close()}} after flushing the {{close_notify}} TLS alert. > While this isn't a problem for the default JDK SSLEngine, it results in > resource leak in Netty/OpenSSL based SSLEngine which frees native resources > only when {{closeInbound}} is invoked. -- This message was sent by Atlassian Jira (v8.20.10#820010)