KSQL 7.6.0.400 (DEP 10.2.0) Release Notes
The notes below relate specifically to the HPE Ezmeral Data
Fabric Distribution for Apache Kafka.
| Version | 7.6.0.400 |
| Release Date | October 2026 |
| HPE Version Interoperability | See Ecosystem Pack Components and OS Support. |
| Source on GitHub | https://github.com/mapr/ksql |
| GitHub Release Tag | 7.6.0.400-dep-1020 |
| Maven Artifacts | https://repository.mapr.com/maven/ |
| Package Names | See Package Names for Ecosystem Packs (EEPs and DEPs). |
New in This Release
- CVE fixes
Fixes
This HPE release includes the following fixes on the base release:
For complete details, refer to the commit log for this project in
Github.
| GitHub Commit Number | Date (YYYY-MM-DD) | Fix Number and Description |
| 7030f301f51 | 2026-10-07 | KAFKA-1172 Update Jetty to 9.4.64.v20261006-df |
| e4be68e0381 | 2026-08-19 | KAFKA-1157 Http components and netty CVEs in KSQL |
| c1fc1433ce3 | 2026-08-13 | KAFKA-1148 CVE-2026-10050 (Jetty) in Kafka projects |
| 527ccfcff8a | 2026-08-05 | KAFKA-1150 CVEs in KSQL |
| 418573cf083 | 2026-07-24 | KAFKA-1142 [KSQL] Upgrade netty and avro to fix CVEs |
| 3d07d3c6127 | 2026-07-24 | KAFKA-1140 [KSQL] Upgrade jetty to fix CVEs (CVE-2026-2332) |
Known Issues and Limitations
- You cannot upgrade KSQL from 4.x to 5.x/6.x versions; you must uninstall KSQL 4.x and then install the newer version.
- Concurrent queries on a table can result in a null pointer exception.
- The
SHOW TOPICScommand does not print information about active consumers and consumer groups. - MAPR-KAFKA-437: Dropping streams/tables may take up to five minutes. This issue is caused by MS-915: “MapR Stream application hangs inside cycle”
- MAPR-KAFKA-427: KSQL server periodically responds with a 403 code only. This issue is caused by MS-915: “MapR Stream application hangs inside cycle”
Resolved Issues
- None.