Changelog for Amazon CloudWatch Metrics Sink Connector for Confluent Platform

To get the latest product updates delivered to you in an RSS feed, add the URL of this page to your feed reader or add the feed's URL directly
https://docs.confluent.io/kafka-connectors/aws-cloudwatch-metrics/2.0/changelog.xml

Version 2.0.18

  • CC-44614: Updated io.netty:netty-handler to 4.1.137.Final to fix CVE-2026-75595 and CVE-2026-75596

  • Removed sensitive data (metric and dimension values, and unrecognized record type values) from connector log and exception messages

Version 2.0.17

  • CC-43162: Updated io.netty to 4.1.136.Final to fix CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-56819, CVE-2026-59898, CVE-2026-59899, CVE-2026-59900, CVE-2026-59901, and CVE-2026-59921

Version 2.0.16

  • CC-42654: Updated com.fasterxml.jackson.core:jackson-databind to 2.22.1 to fix CVE-2026-54515

Version 2.0.15

  • CC-41923: Updated io.netty:netty-handler to 4.1.135.Final to address multiple CVEs

  • CC-41924: Updated io.netty:netty-codec-http2 to 4.1.135.Final to address multiple CVEs

  • CC-42125: Updated io.netty:netty-codec-http to 4.1.135.Final to fix CVE-2026-50020

  • CC-42319: Updated com.fasterxml.jackson.core:jackson-databind to 2.22.0 to address multiple CVEs

Version 2.0.14

  • CC-41157: Bumped io.netty:netty-codec-http to 4.1.133.Final.

  • CC-41258: Bumped io.netty:netty-codec-http2 to 4.1.133.Final.

  • CC-41259: Bumped io.netty:netty-codec to 4.1.133.Final.

Version 2.0.13

  • CC-40261: Bumped io.netty:netty-codec-http2 to 4.1.132.Final to fix CVE-2026-33871

Version 2.0.12

  • CC-40262: Bumped io.netty:netty-codec-http to 4.1.132.Final to fix CVE-2026-33870

Version 2.0.11

  • CC-39541: Bumped com.fasterxml.jackson.core:jackson-core to 2.21.1 to address GHSA-72hv-8253-57qq

Version 2.0.10

  • Bumped connect-plugins version to fix CVE-2024-29371

Version 2.0.9

  • CC-38608: Bumped org.bitbucket.b_c:jose4j to 0.9.6

Version 2.0.8

  • Updated org.bitbucket.b_c:jose4j version to 0.9.5 to resolve the critical vulnerability [CC - 36687] discovered in kafka-connect-aws-cloudwatch-metrics:2.0.7.

Version 2.0.7

  • Updated netty codec version to io.netty:netty-codec-http:4.1.125.Final to resolve the critical vulnerability [CVE - 11512] discovered in kafka-connect-aws-cloudwatch-metrics:2.0.6.

Version 2.0.6

  • Updated netty codec version to io.netty:netty-codec-http:4.1.125.Final to resolve the critical vulnerability [CVE - 9070] discovered in kafka-connect-aws-cloudwatch-metrics:2.0.5.

  • Update template to 0.304.0

Version 2.0.5

  • Updated netty-codec-http2 version to 4.1.124.Final.

  • Updated CODEOWNERS file.

Version 2.0.4

  • CC-33763: Removed usage of non-public and deprecated APIs

Version 2.0.3

  • No changes

Version 2.0.2

  • CC-32373, CC-32057 Upgrade netty-handler and netty-common to 4.1.118.Final for fixing CVE-2025-25193

  • Merge Conflict Resolution (from 1.3.x to 2.0.x)

  • CC-30604: Bump aws-java-sdk-core to fix CVE-2024-21634

Version 2.0.1

  • CC-30346: Bumped org.bitbucket.b_c:jose4j to 0.9.5

  • CC-30347: Bumped com.google.guava:guava to 32.1.1-jre

  • CC-30346: Bumped com.google.protobuf:protobuf-java to 3.25.5

  • CC-30344: Bumped org.json:json to 20231013

Version 2.0.0

  • CC-21105: Upgraded to use AWS SDK for Java 2.x