Changelog for Amazon CloudWatch Logs Source Connector for Confluent Platform

To get the latest product updates delivered to you in an RSS feed, add the URL of this page to your feed reader or add the feed's URL directly
https://docs.confluent.io/kafka-connectors/aws-cloudwatch-logs/2.0/changelog.xml

Version 2.0.12

  • CC-46106: Updated joda-time:joda-time to 2.15.0 (tzdata 2026e) for the British Columbia and Alberta time zone changes on November 1, 2026

  • CC-45281: Updated com.fasterxml.jackson.core:jackson-databind to 2.22.3 to fix CVE-2026-19032, CVE-2026-68497, CVE-2026-83557, CVE-2026-91776, and CVE-2026-91777

  • CC-45378: Updated com.fasterxml.jackson.core:jackson-core to 2.22.3 to fix CVE-2026-89407 and CVE-2026-89425

  • CC-43777: Updated org.apache.logging.log4j:log4j-api to 2.25.5 to fix CVE-2026-49844

  • Updated org.bouncycastle:bcprov-jdk18on, org.bouncycastle:bcpkix-jdk18on, and org.bouncycastle:bcutil-jdk18on to 1.85 to fix CVE-2026-0636, CVE-2026-5588, CVE-2026-5598, CVE-2026-8763, and CVE-2026-13506

Version 2.0.11

  • CC-44607: Updated io.netty:netty-handler to 4.1.137.Final to fix CVE-2026-75595 and CVE-2026-75596

Version 2.0.10

  • CC-43132: Updated io.netty to 4.1.136.Final to fix CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-56819, CVE-2026-59898, CVE-2026-59899, CVE-2026-59900, CVE-2026-59901, and CVE-2026-59921

Version 2.0.9

  • CC-42481: Updated com.fasterxml.jackson.core:jackson-databind to 2.22.1 to fix CVE-2026-54515

Version 2.0.8

  • CC-42303: Updated com.fasterxml.jackson.core:jackson-databind to 2.22.0 to fix CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54516, CVE-2026-54517, and CVE-2026-54518

  • CC-41886: Updated io.netty:netty-handler to 4.1.135.Final to fix CVE-2026-44249, CVE-2026-45416, and CVE-2026-50010

  • CC-41887: Updated io.netty:netty-codec-http2 to 4.1.135.Final to fix CVE-2026-47244, CVE-2026-48043, and CVE-2026-50560

  • CC-42118: Updated io.netty:netty-codec-http to 4.1.135.Final to fix CVE-2026-50020

Version 2.0.7

  • CC-41148: Bumped io.netty:netty-codec-http to 4.1.133.Final.

  • CC-41221: Bumped io.netty:netty-codec-http2 to 4.1.133.Final.

  • CC-41222: Bumped io.netty:netty-codec to 4.1.133.Final.

  • CC-40689: Bumped org.apache.logging.log4j:log4j-core to 2.25.4.

  • Merge Conflict Resolution (from 1.4.x to 2.0.x)

  • Updating connect plugins parent to 0.11.8

  • CC-40193: Extract region from endpoint URL when aws.cloudwatch.signing.region is not set

  • CC-40193: Fix validate 500 on non-AWS environments

Version 2.0.6

  • CC-40245: Bumped io.netty:netty-codec-http to 4.1.132.Final to fix CVE-2026-33870

  • CC-40244: Bumped io.netty:netty-codec-http2 to 4.1.132.Final to fix CVE-2026-33871

Version 2.0.5

  • CC-39521: Updated com.fasterxml.jackson.core:jackson-core to address GHSA-72hv-8253-57qq

  • CC-38387: Updated org.apache.logging.log4j:log4j-core to 2.25.3 to fix CVE-2025-68161

Version 2.0.4

  • CC-38256: Updated io.netty:netty-codec-http to 4.1.129.Final to fix CVE-2025-67735

Version 2.0.3

  • CC-38587: Updated org.bitbucket.b_c:jose4j to 0.9.6 to fix CVE-2024-29371

Version 2.0.2

  • Upgraded guava to 32.0.0-android to fix CVE vulnerability

  • Surfaced ThrottlingException during validation

  • Updated the netty version to 4.1.125.Final

Version 2.0.1

  • Updated netty codec version to io.netty:netty-codec-http:4.1.125.Final to resolve the critical vulnerability [CVE - 9941] discovered in kafka-connect-aws-cloudwatch-logs:2.0.0.

Version 2.0.0

CC-36002: Migrated the connector to use AWS SDK v2