Updating librdkafka.redist to the latest version (2.1.1) to resolve critical vulnerabilities

[vinaygangaraj]

Hi,

Currently Aix.foundatio.MessagingEX.kafka(1.182.2) is using older version of librdkafka.redist(1.8.2). In the older version of librdkafka.redist(1.8.2) package we have below critical vulnerabilities,

• libcrypto-1_1-x64.dll(1.1.1.12) and libssl-1_1-x64.dll(1.1.1.12) libraries have CVE-2022-2068 vulnerability
• zlib1.dll(1.2.11) library is having CVE-2022-37434 and CVE-2018-25032 vulnerabilities

Please update librdkafka.redist to the latest version (2.1.1) to resolve these vulnerabilities and kindly provide the upgraded version of Aix.foundatio.MessagingEX.kafka package as early as possible.

Thanks,
Vinay