Confluent 3.15.1 is released, the main two changes of interest being: - If someone modified /etc/confluent/service.cfg to explicitly change confluent to directly listen to public interfaces, then someone with a node token could request files outside of the node profile. In the default configuration, nginx or apache removes the risk, but if direct access without the reverse proxy is made available, a path traversal issue existed. This has been addressed.
- Nokia ethernet switches now have an 'srlinux' plugin. This uses the json-rpc API for switch informatation. Other changes and details here: https://xcat2.github.io/confluent-docs/release_notes/2026/04/10/confluent-3151-release/
_______________________________________________ xCAT-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/xcat-user
