[
https://issues.apache.org/jira/browse/KAFKA-16471?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17834229#comment-17834229
]
Chia-Ping Tsai commented on KAFKA-16471:
----------------------------------------
{quote}
perhaps we backport KAFKA-16305 to 3.7 and leave out 3.6 for now?
{quote}
yep, please backport KAFKA-16305 to 3.7. And you are right, we can leave out
3.6 and let 3.6.3 (if users require it) RM (if there is a volunteer) to
cherry-pick in the future.
> SslTransportLayer may leak SSLEngine resources
> ----------------------------------------------
>
> Key: KAFKA-16471
> URL: https://issues.apache.org/jira/browse/KAFKA-16471
> Project: Kafka
> Issue Type: Bug
> Components: network
> Affects Versions: 3.7.0, 3.6.1
> Reporter: Gaurav Narula
> Assignee: Gaurav Narula
> Priority: Major
> Fix For: 3.8.0, 3.7.1
>
>
> {{SslTransportLayer}} does not invoke {{SSLEngine::closeInbound}} in
> {{close()}} after flushing the {{close_notify}} TLS alert.
> While this isn't a problem for the default JDK SSLEngine, it results in
> resource leak in Netty/OpenSSL based SSLEngine which frees native resources
> only when {{closeInbound}} is invoked.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
