Release Notes - Kafka - Version 2.7.2

Below is a summary of the JIRA issues addressed in the 2.7.2 release of Kafka. For full documentation of the release, a guide to get started, and information about the project, see the Kafka project site.

Note about upgrades: Please carefully review the upgrade documentation for this release thoroughly before upgrading your cluster. The upgrade notes discuss any critical information about incompatibilities and breaking changes, performance changes, and any other changes that might impact your production deployment of Kafka.

The documentation for the most recent release can be found at https://kafka.apache.org/documentation.html.

Improvement

• [KAFKA-10675] - Error message from ConnectSchema.validateValue() should include the name of the schema.
• [KAFKA-13209] - Upgrade jetty-server to fix CVE-2021-34429

Bug

• [KAFKA-8562] - SASL_SSL still performs reverse DNS lookup despite KAFKA-5051
• [KAFKA-9831] - Failing test: EosIntegrationTest.shouldNotViolateEosIfOneTaskFailsWithState[exactly_once_beta]
• [KAFKA-9887] - failed-task-count JMX metric not updated if task fails during startup
• [KAFKA-10727] - Kafka clients throw AuthenticationException during Kerberos re-login
• [KAFKA-10846] - FileStreamSourceTask buffer can grow without bound
• [KAFKA-12252] - Distributed herder tick thread loops rapidly when worker loses leadership
• [KAFKA-12262] - New session keys are never distributed when follower with key becomes leader
• [KAFKA-12667] - Incorrect error log on StateDirectory close
• [KAFKA-12730] - A single Kerberos login failure fails all future connections from Java 9 onwards
• [KAFKA-12751] - ISRs remain in in-flight state if proposed state is same as actual state
• [KAFKA-12752] - CVE-2021-28168 upgrade jersey to 2.34 or 3.02
• [KAFKA-12904] - Connect's validate REST endpoint uses incorrect timeout
• [KAFKA-12948] - NetworkClient.close(node) with node in connecting state makes NetworkClient unusable
• [KAFKA-12951] - Infinite loop while restoring a GlobalKTable
• [KAFKA-12983] - onJoinPrepare is not always invoked before joining the group
• [KAFKA-12996] - OffsetOutOfRange not handled correctly for diverging epochs when fetch offset less than leader start offset
• [KAFKA-13099] - Message too large error when expiring transactionalIds
• [KAFKA-13141] - Leader should not update follower fetch offset if diverging epoch is present
• [KAFKA-13214] - Consumer should not reset group state after disconnect
• [KAFKA-13236] - TopologyTestDriver crashes with EOS-beta config
• [KAFKA-13277] - Serialization of long tagged string in request/response throws BufferOverflowException

Task

• [KAFKA-12820] - Upgrade maven-artifact dependency to resolve CVE-2021-26291
• [KAFKA-12985] - CVE-2021-28169 - Upgrade jetty to 9.4.42

Sub-task

• [KAFKA-12790] - Remove SslTransportLayerTest.testUnsupportedTlsVersion