# Changelog for Syslog Source Connector for Confluent Platform ## Version 1.5.17 * fix: upgrade jackson-databind to 2.18.9 from 2.18.6 to fix CVE * Add KDP gating block to semaphore.yml ## Version 1.5.16 * Upgrade avro to 1.11.5 to fix CVE ## Version 1.5.15 * fix: upgrade jackson-core to 2.18.6 to fix CVE (CC-39522) ## Version 1.5.14 * Update jose4j.version to 0.9.6 to fix CVE-2024-29371 ## Version 1.5.13 * Updated org.eclipse.jgit to resolve vulnerability CVE-2025-4949 ## Version 1.5.12 * CC-33763: Removed usage of non-public and deprecated APIs ## Version 1.5.11 * update beanutils version to 1.11.0 ## Version 1.5.10 * Updated org.apache.avro:avro to 1.11.4 to resolve vulnerability CVE-2024-47561 * Updated com.google.protobuf:protobuf-java to 3.25.5 to resolve vulnerability CVE-2024-7254 ## Version 1.5.9 * Updated jose4j from 0.9.3 to 0.9.4 to resolve CVE-2023-51775 * Introduced a new config `syslog.use.length.as.delimiter` * Introduced a new predicated `FieldIsIP` for `HostnameResolverTransformation` ## Version 1.5.8 * Updated jose4j from 0.7.2 to 0.9.3 to resolve vulnerability * Updated org.apache.avro version to 1.11.3 to resolve vulnerability * Resolved CVE-2024-26308 * Migration: Jenkins -> Semaphore ## Version 1.5.7 * Change decoder to use length as delimiter if provided ## Version 1.5.6 * Resolved CVE-2023-4759 ## Version 1.5.5 * RCCA-14867: Allows the connector’s task to bind to same address after restart ## Version 1.5.4 * CC-20539: Updated dependency `jackson-core` to resolve CVE * CC-21197: Updated dependency `com.google.guava_guava` to resolve CVE ## Version 1.5.3 * Use min of current and message timestamp for Kafka Record Timestamp ## Version 1.5.2 * RCCA-12515 Failing the task if the configured port is unavailable or already used(only for TCP), upon task startup ## Version 1.5.1 * Merge Conflict Resolution (from 1.3.x to 1.4.x) * Bump connect-plugins version to fix CVE * bump connect-plugins version to fix CVE ## Version 1.5.0 * Added support for client authentication in SSL communication