CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

net/kafka 4.3.1

Distributed streaming platform

Port info

Maintainer
timp87@gmail.com
Packages
latest: 4.3.1
Upstream
Higher version available: 4.4.0
Last update
to 4.3.1 · 2a931b245e
Quarterly
2026Q4: 4.3.1
WWW
https://kafka.apache.org/
Links
cgit · VuXML

Install

Package
# pkg install kafka
installs 4.3.1 from latest; from quarterly (2026Q4) 4.3.1
Port
# cd /usr/ports/net/kafka && make install clean
# make -C /usr/ports/net/kafka config  # change options first
Size
128 MiB download · 137 MiB installed
Depends on
java/openjdk25 25.0.4+7.f.1_1, shells/bash 5.3.20
License
APACHE20
Creates
user kafka, group kafka
Options
1 of 1 on in the package: DOCS

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 164.3.14.3.1–
FreeBSD 154.3.14.3.1–
FreeBSD 144.3.14.3.14.3.1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 154.3.14.3.1–
FreeBSD 144.3.14.3.14.3.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 4.3.1.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
266590maintainer-feedback+ net/kafka: Link with no-x11 JavaOpen2025-11-04

Commits (42)

Yusuf Yaman (nxjoseph) · 4.3.1 MFH 2026Q3 ✓
net/kafka: Update 4.3.0 => 4.3.1

While here:
- Fix incorrect behaviour of log4j2 in rc.d script.
- Sort SUB_LIST (pet portfmt).

Release Announcement:
https://kafka.apache.org/blog/2026/06/25/apache-kafka-4.3.1-release-announcement/
Upgrading Notes:
https://kafka.apache.org/43/getting-started/upgrade/#upgrading-to-431
Release Notes:
https://downloads.apache.org/kafka/4.3.1/RELEASE_NOTES.html

PR:		298075
Approved by:	Pavel Timofeev <timp87@gmail.com> (maintainer timeout, 2 weeks)
Approved by:	osa, vvd (Mentors, implicit)
MFH:		2026Q3
2a931b245e
Vladimir Druzenko (vvd) · 4.3.0
net/kafka: Update 3.9.2 => 4.3.0

Release Announcement:
https://kafka.apache.org/blog/2026/05/22/apache-kafka-4.3.0-release-announcement/

PR:		292031
Approved by:	Pavel Timofeev <timp87@gmail.com> (maintainer, tiemout 2 weeks)
Sponsored by:	UNIS Labs
Co-authored-by:	Pavel Timofeev <timp87@gmail.com>
63e5817169
Vladimir Druzenko (vvd) · 3.9.2
net/kafka: Update 3.9.1 => 3.9.2 (3 CVEs)

Release Announcement:
https://kafka.apache.org/blog/2026/02/21/apache-kafka-3.9.2-release-announcement/

PR:		292031
Approved by:	Pavel Timofeev <timp87@gmail.com> (maintainer, timeout 2 weeks)
Security:	CVE-2025-48734
Security:	CVE-2025-48924
Security:	CVE-2024-29371
Sponsored by:	UNIS Labs
MFH:		2026Q2
2c0a7d5c2d
Ronald Klop (ronald) · 3.9.1_2
*/*: bump portrevision after java_default=25 update

Included all ports that have USES=java.

PR:	293559
86813e9ccf
Ronald Klop (ronald) · 3.9.1_1
*/*: bump portrevision after java_default=21 update

PR:	272855
2baaf16375
Vladimir Druzenko (vvd) · 3.9.1
net/kafka: Update 3.7.1 => 3.9.1

Release Notes:
https://archive.apache.org/dist/kafka/3.7.2/RELEASE_NOTES.html
https://archive.apache.org/dist/kafka/3.8.0/RELEASE_NOTES.html
https://archive.apache.org/dist/kafka/3.8.1/RELEASE_NOTES.html
https://archive.apache.org/dist/kafka/3.9.0/RELEASE_NOTES.html
https://archive.apache.org/dist/kafka/3.9.1/RELEASE_NOTES.html

PR:		286985
Approved by:	Pavel Timofeev <timp87@gmail.com> (maintainer)
3ce0f71deb
Muhammad Moinur Rahman (bofh) · 3.7.1
Mk/**java.mk: Convert bsd.java.mk to USES

The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
  USES=java:build,run if NO_BUILD is undefined. Else it defaults to
  USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
  USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
  extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
  build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
  build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>

Approved by: mat (portmgr), glewis
Differential Revision:  https://reviews.freebsd.org/D48201
0835676e36
Vladimir Druzenko (vvd) · 3.7.1
net/kafka: update 3.7.0 → 3.7.1

Release announcement:
https://kafka.apache.org/blog#apache_kafka_371_release_announcement
Changelog:
https://downloads.apache.org/kafka/3.7.1/RELEASE_NOTES.html

PR:	280093
6e79628cb6
Vanilla I. Shu (vanilla) · 3.7.0
net/kafka: update to 3.7.0.

PR:		278374
Reported by:	Dmitry Wagin <dmitry.wagin at ya dot ru>
Approved by:	maintainer
00c40a87c1
Fernando Apesteguía (fernape) · 3.6.1
net/kafka: update to v3.6.1

ChangeLog: https://downloads.apache.org/kafka/3.6.1/RELEASE_NOTES.html
Improvement

 * In Java-client, backoff should be skipped for retried producer-batch to a new
   leader
 * Upgrade ZooKeeper to 3.8.3

Bug

 * block-cache-capacity metrics worth twice as much as normal
 * Gradle build fails with missing commitId after git gc
 * Concurrency bug in RemoteIndexCache leads to IOException
 * RackId doesn't exist error while running WordCountDemo
 * Handle large keystores in SslEngineValidator
 * Duplicate Producer ID blocks during ZK migration
 * StateRestoreListener#onRestoreSuspended is never called because wrapper
   DelegatingStateRestoreListener doesn't implement onRestoreSuspended
 * Breaking change in 3.4.0 ByteBufferSerializer
 * Topics marked for deletion in ZK are incorrectly migrated to KRaft
 * Possible NPE is thrown in MirrorCheckpointTask
 * Fix CVE-2023-4586 in netty:handler
 * NPE in ChunkedByteStream
 * Zookeeper.jar | CVE-2023-44981
 * Partition-Count is not getting updated Correctly in the Incremental
   Co-operative Rebalancing(ICR) Mode of Rebalancing
 * Disabling scheduled rebalance delay in Connect can lead to indefinitely
   unassigned connectors and tasks
 * LeaveGroupResponse v0-v2 should handle no members
 * ProduceRequest#partitionSizes() is not an atomic operation
 * ZK brokers incorrectly handle KRaft metadata snapshots
 * Malformed connect source offsets corrupt other partitions with DataException
 * Trying to access uncopied segments metadata on listOffsets
 * KRaft controller writes empty state to ZK after migration

Task

 * Add 3.5.0 to broker/client and streams upgrade/compatibility tests
 * Rolling upgrade system tests are failing
 * Remote log segments should be considered once for retention breach
 * Add 3.4.0 streams upgrade/compatibility tests

Test

    * Add tests for RemoteIndexCache
    * Flaky test ZkMigrationIntegrationTest.testMigrateTopicDeletions

PR:		275611
Reported by:	timp87@gmail.com
MFH:		2023Q4 (security fix)
Security:	CVE-2023-4586
452f0014ea
Robert Clausecker (fuz) · 3.6.0
net/kafka: update to v3.6.0

Changelog: https://downloads.apache.org/kafka/3.6.0/RELEASE_NOTES.html

PR:		274508
801cb2114b
Robert Clausecker (fuz) · 3.5.1
net/kafka: update to 3.5.1

Changelog: https://downloads.apache.org/kafka/3.5.1/RELEASE_NOTES.html

PR:		273368
Approved by:	timp87@gmail.com (maintainer)
eec93402d2
Fernando Apesteguía (fernape) · 3.5.0
net/kafka: update to 3.5.0

ChangeLog: https://kafka.apache.org/blog#apache_kafka_350_release_announcement

PR:		272150
Reported by:	timp87@gmail.com (maintainer)
3fdf757e5c
Matthew Seaman (matthew) · 3.4.1
net/kafka: update to v3.4.1

Changes:	https://downloads.apache.org/kafka/3.4.1/RELEASE_NOTES.html
PR:		271921
26db27d31e
Fernando Apesteguía (fernape) · 3.4.0
net/kafka: update to 3.4.0

ChangeLog: https://downloads.apache.org/kafka/3.4.0/RELEASE_NOTES.html

PR:		271685
Reported by:	timp87@gmail.com (maintainer)
a9ebadd7e8
Fernando Apesteguía (fernape) · 3.3.2
net/kafka: update to 3.3.2

ChangeLog: https://downloads.apache.org/kafka/3.3.2/RELEASE_NOTES.html

PR:		269270
Reported by:	0x1eef@protonmail.com (maintainer)
MFH:		2023Q1 (security fixes)
Security:	CVE-2018-25032
dbde71f335
Ronald Klop (ronald) · 3.3.1_1
net/kafka: fix regression in non-Kraft mode after update to 3.3.1

"There's a regression after update to 3.3.1 in non-Kraft mode
The port always creates /var/db/kafka/kraft dir. But it brokes the Kafka environment."

PR:	267309
Approved by: rene
Differential Revision: https://reviews.freebsd.org/D37731
93b244dc10
Fernando Apesteguía (fernape) · 3.3.1
net/kafka: Use Java 11 or 17.

Java 8 is deprecated in 3.0.0.

PR:		266616
Reported by:	yonas.yanfa@gmail.com (maintainer)
Approved by:	timp87@gmail.com (maintainer)
91ef273ce6
Stefan Eßer (se) · 3.1.0
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.1.0
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Guangyuan Yang (ygy) · 3.1.0
net/kafka: Update to 3.1.0

Changelog:	https://downloads.apache.org/kafka/3.1.0/RELEASE_NOTES.html

PR:		261443
ec7febd860
Guangyuan Yang (ygy) · 3.0.0
net/kafka: Update to 3.0.0

Changelog:	https://downloads.apache.org/kafka/3.0.0/RELEASE_NOTES.html

PR:		260933
fe858baeb0
Stefan Eßer (se) · 2.8.0
net/kafka: Add CPE information

Approved by:	portmgr (blanket)
22dfeb0e9b
Daniel Engberg (diizzy) · 2.8.0
net/kafka: Update MASTER_SITES

Use a direct URL to Apache's release archive site as it's not mirrored
by upstream mirror sites

Approved by:	rene (portmgr blanket), arrowd (mentor)
Differential Revision:	https://reviews.freebsd.org/D32430
224466e2f4
Neel Chauhan (nc) · 2.8.0
net/kafka: update to 2.8.0

PR:		255494
Submitted by:	timp87 AT gmail DOT com (maintainer)
c6c5ee629e
Mathieu Arnold (mat) · 2.7.0
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.7.0
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 2.7.0
Remove # $FreeBSD$ from Makefiles.
305f148f48
Neel Chauhan (nc) · 2.7.0
net/kafka: update to 2.7.0

PR:		253301
Submitted by:	timp87 AT gmail DOT com
926e942f9a
Tobias C. Berner (tcberner) · 2.6.0_1
net/kafka: change Scala to 2.13

- minor rc_script changes

PR:		248638
Submitted by:	Dmitry Wagin <dmitry.wagin@ya.ru>
Approved by:	timp87@gmail.com (maintainer)
fdb8b81851
Li-Wen Hsu (lwhsu) · 2.6.0
Update to 2.6.0

PR:		248480
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)
1c4197a0f1
Kurt Jaeger (pi) · 2.5.0
net/kafka: update 2.4.1 -> 2.5.0

PR:		245780
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)
Relnotes:	https://downloads.apache.org/kafka/2.5.0/RELEASE_NOTES.html
df29553dde
Kurt Jaeger (pi) · 2.4.1
net/kafka: update 2.4.0 -> 2.4.1

PR:		244748
Submitted by:	timp87@gmail.com (maintainer)
Relnotes:	https://downloads.apache.org/kafka/2.4.1/RELEASE_NOTES.html
8098b7f4ad
Tobias C. Berner (tcberner) · 2.4.0
net/kafka: Update to 2.4.0

PR:		242782
Submitted by:	Dmitry Wagin <dmitry.wagin@ya.ru>
Approved by:	timp87@gmail.com (maintainer)
a3be752c53
Steve Wills (swills) · 2.3.0
net/kafka: update to 2.3.0

While here, improve rc script and formatting

PR:		239000
Submitted by:	Dmitry Wagin <dmitry.wagin@ya.ru>
Approved by:	timp87@gmail.com (maintainer)
6437629485
Steve Wills (swills) · 2.2.0
net/kafka: update to 2.2.0

PR:		237053
Submitted by:	timp87@gmail.com (maintainer)
a69dd345a9
Steve Wills (swills) · 2.1.1
net/kafka: update to 2.1.1

PR:		235928
Submitted by:	timp87@gmail.com (maintainer)
97f0df924a
Steve Wills (swills) · 2.1.0
net/kafka: update to 2.1.0

While here, switch to scala 2.12 and redirect output to syslog

PR:		233844
Submitted by:	timp87@gmail.com (maintainer)
a576db78a1
Kurt Jaeger (pi) · 2.0.0
net/kafka: update 1.0.0 -> 2.0.0

PR:		231295
Submitted by:	pete@nomadlogic.org, timp87@gmail.com (maintainer)
Relnotes:	https://www.apache.org/dist/kafka/2.0.0/RELEASE_NOTES.html
02522f2cfd
Steve Wills (swills) · 1.0.0
net/kafka: update to 1.0.0

PR:		225186
Submitted by:	timp87@gmail.com (maintainer)
36c546a983
Steve Wills (swills) · 0.11.0.1
net/kafka: Update to 0.11.0.1

PR:		222487
Submitted by:	timp87@gmail.com (maintainer)
cec60ac1f7
Steve Wills (swills) · 0.11.0.0
net/kafka: create port

Kafka is used for building real-time data pipelines and streaming apps.
It is horizontally scalable, fault-tolerant, wicked fast,
and runs in production in thousands of companies.

WWW: https://kafka.apache.org/

PR:		220793
Submitted by:	timp87@gmail.com
4534c43fd0