[ https://issues.apache.org/jira/browse/KAFKA-9997?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17108078#comment-17108078 ]
Tom Bentley commented on KAFKA-9997: ------------------------------------ Sounds like a dupe of [KAFKA-9366|https://issues.apache.org/jira/browse/KAFKA-9366] > upgrade log4j lib to address CVE-2020-9488 > ------------------------------------------ > > Key: KAFKA-9997 > URL: https://issues.apache.org/jira/browse/KAFKA-9997 > Project: Kafka > Issue Type: Bug > Components: packaging > Affects Versions: 2.5.0 > Reporter: Emanuele Maccherani > Priority: Major > > Kafka latest version is using log4j 1.2.17, which is affected by > CVE-2020-9488. -- This message was sent by Atlassian Jira (v8.3.4#803005)