- Issued:
- 2025-10-16
- Updated:
- 2025-10-16
RHEA-2025:18216 - Product Enhancement Advisory
Synopsis
Red Hat build of Debezium 3.2.4 release
Type/Severity
Product Enhancement Advisory
Topic
Red Hat build of Debezium connectors in version 3.2.4 is now available for Red Hat Application Foundations.
Description
Debezium is a distributed platform that turns your existing databases into event streams, so applications can see and respond immediately to each row-level change in the databases.
Debezium is built on top of Apache Kafka and provides Kafka Connect compatible connectors that monitor specific database management systems. Debezium records the history of data changes in Kafka logs, from where your application consumes them. This makes it possible for your application to easily consume all of the events correctly and completely. Even if your application stops unexpectedly, it will not miss anything: when the application restarts, it will resume consuming the events where it left off.
Solution
To apply this update just follow standard installation procedure
Affected Products
- Red Hat Integration Text-Only Advisories x86_64
- Red Hat Integration 1 x86_64
Fixes
- DBZ-9006 - Events inserted during snapshot are being duplicated
- DBZ-5920 - Ingestion issues with Mongodb when empty [] or empty {} appear in the Json feed
- DBZ-6068 - Optimize ExtractNewRecordState "delete.handling.mode" and "drop.tombstones" configuration
- DBZ-6387 - Support new non adaptive temporal values
- DBZ-7051 - Pass connector configuration to Column/Table naming strategies
- DBZ-8060 - Dropping in process batch transactions when shutting down
- DBZ-8159 - Document Oracle mTLS connection configuration
- DBZ-8207 - Incremental snapshot in-progress notification doesn't contain full composite PK
- DBZ-8336 - Error handling mode in ReselectColumnsPostProcessors
- DBZ-8499 - Make source info schema versioned
- DBZ-8525 - Centralise sensitive data logging using the Loggings Class
- DBZ-8549 - [DOC] Documentation for using the JDBC Sink Connector in an OpenShift environment
- DBZ-8550 - Content-based routing expression variable headers is singular in code
- DBZ-8551 - heartbeat.interval.ms not honored
- DBZ-8557 - Sqlserver connector requires unbounded memory to process big transactions
- DBZ-8561 - Use enum set strings flag available in Vitess v20 for decoding enums/sets
- DBZ-8562 - Move schema history recovery out of task start method
- DBZ-8563 - Pulsar Producer Batcher Builder - Key Based Batching
- DBZ-8566 - Add note to connector docs to inform users about future removal of Containerfile deployment instructions
- DBZ-8568 - Prototype support of WASM in Debezium transformation
- DBZ-8569 - S3 storage can force path-style addressing
- DBZ-8570 - Reduce frequency table exists and column metadata queries
- DBZ-8571 - Support MySQL and PostgreSQL vector data types
- DBZ-8573 - Align JDBC storage configuration naming
- DBZ-8576 - Incorrect NumberOfEventsFiltered metrics in streaming
- DBZ-8582 - Support MariaDB 11.7+ vector data type
- DBZ-8586 - Provide full data types coverage for TinyGo Wasm SMT
- DBZ-8594 - Data loss when primary key update is last operation in a transaction
- DBZ-8595 - Slow Debezium startup for large number of tables
- DBZ-8596 - Mention write permission on signaling data collection for incremental snapshot
- DBZ-8598 - Change schema history producer configurations
- DBZ-8610 - Add SnapshotSkipped status to metrics
- DBZ-8644 - Include Current Archive log been processed in JMX metrics
- DBZ-8647 - Remove deprecated Oracle JMX metrics
- DBZ-8660 - Error validating connector with special character $
- DBZ-8672 - Debezium doesn't shut down correctly when encountering message delivery timeout from pub/sub
- DBZ-8679 - All text cols with binary collation should still be output as strings
- DBZ-8680 - Broken pipe on streaming connection after blocking snapshot (Postgres)
- DBZ-8689 - Differentiate between epoch & zero dates when columns it not nullable
- DBZ-8692 - SQL Server - Errors related to schema validation should provide more details
- DBZ-8694 - Set string data type for medium/tiny/long text cols with binary collation
- DBZ-8702 - Implement SMT for adding embeddings to the records
- DBZ-8708 - ts_ms in source may default to 0 instead of Instant.now()
- DBZ-8710 - PDB database name default considering as UPPERCASE
- DBZ-8711 - Connector errors.max.retries is ignored
- DBZ-8713 - Disable ARM images for PostgreSQL
- DBZ-8715 - Add concurrency and compression to pub/sub change consumer
- DBZ-8717 - Prevent table-level read locks when minimal locking is enabled
- DBZ-8723 - Signal table column names are arbitrary, but delete strategy expects column named id
- DBZ-8726 - Refactor JdbcChangeEventSink execute method for buffer resolution
- DBZ-8727 - Implement ErrorHandler to throw RetriableException during SinkTask put operations
- DBZ-8734 - Debezium Server: Nats consumer crashes with binary serialization
- DBZ-8737 - Wasm SMT effective access to schema fields
- DBZ-8740 - Oracle Connector: Additional timestamp fields from LogMiner (V$LOGMNR_CONTENTS)
- DBZ-8743 - Prevent write operations in PostgreSQL in read-only mode.
- DBZ-8744 - Oracle log consistency check always fails after database refresh with residual archive logs
- DBZ-8747 - A transaction mined across two queries can randomly cause unsupported operations
- DBZ-8748 - Trim extra spaces in property keys when transforming to config
- DBZ-8755 - Negative binlog position values for MariaDB
- DBZ-8757 - Improve debezium-vitess-connector enqueue speed
- DBZ-8775 - Support keyspace heartbeats feature
- DBZ-8776 - Add delete.tombstone.handling.mode to ConfigDef returned by config method and change its display name
- DBZ-8780 - Signal Channel Kafka restart snapshot multiple snapshot after connector restart
- DBZ-8782 - Allow Debezium server to use Kafka Connect format for the records
- DBZ-8786 - Improve Error Handling for Duplicate server_id / server_uuid in MySQL Connector
- DBZ-8788 - Document using TLS encryption of Oracle connectors using JKS instead of Oracle Wallet
- DBZ-8790 - Handle BYTES as VARBINARY in SQLServer sink
- DBZ-8817 - Doc should mention the the correlation ID does not map 1:1 with the original signal when multiple signals are sent.
- DBZ-8824 - Test keyspace heartbeats during snapshot
- DBZ-8825 - Make methods for adding fields into the record reuseable
- DBZ-8826 - Support string with temporal precision mode
- DBZ-8828 - Include XStream classes in downstream builds
- DBZ-8830 - Oracle connector remains waiting indefinitely for Logminer response upon starting new session
- DBZ-8832 - Unexpected null value for Field Configuration deprecated aliases
- DBZ-8833 - DB2 Signaling creates watermarking in the wrong schema
- DBZ-8834 - Support CURDATE and CURTIME functions for MySQL DDL
- DBZ-8838 - Conditionalize note about Extended max string size in oracle.adoc that refers to Jira issue
- DBZ-8840 - Update SQL Server doc to correct schema history MBean name
- DBZ-8841 - Expose Oracle connector XStreams content in product edition
- DBZ-8844 - In-progress transaction over boundary detected but skipped during streaming
- DBZ-8849 - Unparseable statements : Default column values can be scalar functions
- DBZ-8855 - ExtractChangedRecordState should always add configured headers, even if field list is empty
- DBZ-8858 - Use the clustered index in sqlserver connector queries
- DBZ-8860 - The method removeTransactionEventWithRowId creates high CPU load in certain scenarios
- DBZ-8861 - All queries issued by Debezium should be marked with workload tag
- DBZ-8862 - Log JMX MBean name when registration fails due to name conflict
- DBZ-8863 - Transitive filtering of debezium-connector-dse excludes snakeyaml from /lib/
- DBZ-8869 - When using the Oracle relaxed SQL parser setup, strings with apostrophe followed by comma are trimmed
- DBZ-8870 - During a mining session treat ORA-00310 redo logs being inconsistent
- DBZ-8874 - Oracle Ehcache buffer will silently evict entries when configured size limits are reached
- DBZ-8875 - Upgrade to Kafka 4.0.0
- DBZ-8877 - Improve MySQL/MariaDB connector resilience during post-schema recovery reconnect
- DBZ-8879 - Fix performance regression in debezium-core
- DBZ-8880 - Transaction events are not removed when transaction event count over threshold
- DBZ-8884 - Oracle username returns unknown when transaction mined in two steps
- DBZ-8885 - Expose option to reset (streaming) metrics individually
- DBZ-8886 - Setting Oracle buffer type to an unsupported/invalid value is not validated properly
- DBZ-8889 - Oracle timestamp columns are ignored when temporal mode set to ISOSTRING
- DBZ-8895 - DDL parsing fails on "BY USER FOR STATISTICS" virtual column clause
- DBZ-8897 - Postgres CapturedTables metric isn't populated.
- DBZ-8901 - Raise more meaningful exception in case of inconsistent post processor config
- DBZ-8904 - Allow filtering Oracle LogMiner results by client id
- DBZ-8907 - FieldToEmbedding SMT fails with NPE for delete records
- DBZ-8908 - Allow timeout to be configured for Ollama embedding model
- DBZ-8910 - FieldToEmbedding SMT crashes when source field name is substring of embedding name
- DBZ-8911 - Add configuration to skip heartbeat messages in Redis Stream consumer
- DBZ-8916 - DDL statement couldn't be parsed. PAGE_COMPRESSED
- DBZ-8919 - Setting continuous mining for Oracle 18 or later causes NPE
- DBZ-8921 - Improve performance by removing unnecessary filter check
- DBZ-8923 - XStream may fail with invalid processed low-watermark
- DBZ-8924 - Implement LogMiner committed data only unbuffered adapter
- DBZ-8925 - Improve lookup performance for the Oracle ObjectId cache when using the Hybrid mining strategy
- DBZ-8926 - Exclude unknown tables when query filter is enabled and using a non-Hybrid strategy
- DBZ-8929 - NullPointerException happens when a transaction commits that is unknown to the connector
- DBZ-8938 - Remove unncessary metadata query and map fetch calls
- DBZ-8940 - Processing error because of incomplete date part of DATETIME datatype in MariaDB
- DBZ-8943 - ORA-08186 invalid timestamp specified occurs when connector is started
- DBZ-8944 - Improve log message when failing to apply a partial rollback
- DBZ-8945 - [Doc] Apicurio registry configuration should include instructions for confluent compatibility mode
- DBZ-8946 - passing topic name as well in error in case a single connector is configured with multiple topics
- DBZ-8957 - Debezium Engine Quarkus Extension: Use Quarkus-style Configuration Properties
- DBZ-8959 - Debezium Engine Quarkus Extension: Introduce Lifecycle Annotations for Debezium Engine
- DBZ-8961 - Debezium Engine Quarkus Extension: Introduce Debezium Capturing Listener
- DBZ-8964 - Debezium Engine Quarkus Extension: expose Debezium Notification Events
- DBZ-8974 - Include JSON source when throwing deserialization error with incremental snapshots
- DBZ-8979 - JdbcSchemaHistory Fails to Handle Data Sharding When Recovering Records
- DBZ-8982 - Stop forced flushing with reduction buffer in JDBC Sink Connector
- DBZ-8986 - Unify behavior across LogMiner buffered/unbuffered implementations
- DBZ-8991 - Add JMX metrics/statistics for cached events
- DBZ-8992 - Create emdeddings SMT extension for Hugging face
- DBZ-8993 - Create emdeddings SMT extension for Voyage AI models
- DBZ-8995 - Make StreamingChangeEventSource closeable
- DBZ-8999 - DDL is logged with sensitive information in AbstractSchemaHistory
- DBZ-9001 - Add validation for signal.data.collection
- DBZ-9002 - The in-progress notification is sent before the snapshot job starts
- DBZ-9003 - Connection left in "idle in transaction" state when setting snapshot mode to initial only
- DBZ-9004 - Introduce connection validation timeout
- DBZ-9008 - Improve failed connection logging
- DBZ-9011 - Replace Postgres txid_current() by pg_current_xact_id()
- DBZ-9013 - While the low watermark scn updates across iterations, it is never flushed to the offsets.
- DBZ-9014 - Allow custom load balancing policy
- DBZ-9016 - PostgresSQL Read-only incremental snapshot continue to read chunks even with completed snapshot
- DBZ-9017 - Error when converting table and column names to uppercase
- DBZ-9018 - Fix some problems experienced when running with Postgres JDBC driver 42.7.5.
- DBZ-9019 - Oracle database PDB name in lowercase is not connecting to the connector.
- DBZ-9020 - OpenLineage integration
- DBZ-9022 - Add logic to `ExtractNewRecordState` to convert all deletes to tombstone records
- DBZ-9027 - Error parsing MariaDB DDL
- DBZ-9030 - LogMiner performance regression with buffered implementation
- DBZ-9031 - Column named SEQUENCE, a MySQL keyword fails to be parsed
- DBZ-9034 - MySQL parser fails when using a JSON_TABLE in a join clause
- DBZ-9040 - Default values may be misinterpreted as bind parameters due to nested quotes
- DBZ-9042 - Add option to enable hostname verification for Redis sink
- DBZ-9050 - Implement support for stopLoggingOnClose
- DBZ-9051 - Add SQLException to retriable exceptions
- DBZ-9052 - Missing configuration properties for signal channel readers can lead to NullPointerException
- DBZ-9053 - Create documentation for embeddings SMT
- DBZ-9055 - Blocking snapshot does not always resume streaming thread when task is in shutdown
- DBZ-9056 - Remove embeddings prefix from embeddgins SMT configuration
- DBZ-9060 - Field deprecatedAliases are nullified by other options
- DBZ-9062 - Oracle-specific lag metric is being updated based on empty transaction commits
- DBZ-9064 - Field.withDeprecatedAliases() skips deprecatedFieldWarning validator
- DBZ-9065 - Error while parsing a MariaDB DDL
- DBZ-9066 - Field::deprecatedFieldWarning results into validation failure
- DBZ-9070 - Peform topic settings check in case history topic is already present
- DBZ-9074 - Oracle LogMiner mistakenly emits rollback transactions in commit data only mode
- DBZ-9081 - Implement heartbeat.action.query
- DBZ-9082 - Add option to specify custom keystore and truststore for Redis sink
- DBZ-9085 - Exclude TRUNCATE and REPLACE statements from schema history
- DBZ-9086 - Postgres Reselector fails on serial primary keys
- DBZ-9091 - SQL Server connector doesn't properly handle special characters in database object names
- DBZ-9092 - Column name encrypted is not supported by MySqlParser
- DBZ-9093 - Lots of time spent in parsing column type modifiers
- DBZ-9094 - Typo in the registry link for amq streams kafka container
- DBZ-9098 - Reduce calls to getEndOffset during kafka schema history recovery
- DBZ-9101 - Removal of REST extension left service loader definition in Oracle connector
- DBZ-9111 - Improve the messaging in the "Table is not a relational table" logged exception
- DBZ-9117 - SQL Server connector doesn't properly handle special characters in schema names
- DBZ-9118 - Fix warn log if snapshot mode when needed is required but is not set
- DBZ-9121 - Clarify IBM DB2 IIDR licensing requirement in Db2 connector documentation
- DBZ-9128 - Implement caching in table inclusion filter
- DBZ-9129 - Document more restrictive configuration for creating Oracle LogMiner user
- DBZ-9131 - The presence of "_" in the ORACLE table name caused the cdc to fail
- DBZ-9132 - '||' in ORACLE NVARCHAR data will cause exception
- DBZ-9141 - JDBC Connector is lost when filter.include.list is used
- DBZ-9143 - Prevent multiple initializations of DataTypeResolver
- DBZ-9146 - Remove nominalTime facet from OpenLineage events
- DBZ-9150 - Decouple LSN Flush from Offset Committer Thread and Introduce Timeout Handling
- DBZ-9153 - Typo in the example of the Custom Converter
- DBZ-9155 - ORA-00600: possible solutions to be added to the documentation FAQ
- DBZ-9158 - Introduce publish.via.partition.root flag in PostgresCDC Connector
- DBZ-9161 - Postgres: log errors from keepalive thread for replication
- DBZ-9162 - Fix truncate present in history topic if it is a skipped operation
- DBZ-9163 - Cannot use idenitifier named LOCKED
- DBZ-9168 - MySQL connector doesn't properly handle special characters in database object names
- DBZ-9169 - Debezium uses deprecated JdbcConnection#quotedColumnIdString()
- DBZ-9170 - Align configuration for post processors to transforms, predicates
- DBZ-9172 - [ORACLE] DDL parsing failed
- DBZ-9191 - DmlParserException: DML statement couldn't be parsed
- DBZ-9192 - OpenLineage - Postgres connector emits Lineage Event with incorrect dataset name
- DBZ-9193 - Quarkus-Debezium-Extension does not work with Hibernate ORM 7
- DBZ-9199 - Oracle connector crashes on redo entry without SQL_REDO for temporary tables
- DBZ-9203 - Misleading wording in the WalPositionLocator JavaDoc
- DBZ-9208 - When using non-recovery snapshot modes, offsets are not reset
- DBZ-9217 - Possible regression with throwing DebeziumException rather than warning
- DBZ-9231 - MongoDB ExtractNewDocumentState SMT crash with nested struct in array in 3.2
- DBZ-9232 - Mongodb incremental snapshot is not honoring additional conditions
- DBZ-9233 - WithClause inside an INSERT statement throws DDL parser exception
- DBZ-9236 - Oracle snapshot boundary mode does not have a field display name
- DBZ-9237 - Request fix for muti-task CREATE TABLE collisions for jdbc postgres target causing task to crash
- DBZ-9238 - Oracle split table partition does not support online mode
- DBZ-9239 - Include the raw SinkRecord in the logged output of a JDBC sink record
- DBZ-9241 - Exceptionally large mining windows can lead unintended metrics/performance issues
- DBZ-9248 - Add configuration to disable Context headers added with OpenLineage
- DBZ-9272 - Add ability to specify whether to use a CTE-based query for LogMiner
- DBZ-9280 - Allow Oracle heartbeat action query error handler to be resilient to ORA-02396
- DBZ-9293 - Reselect post processor does not work with VariableScaleDecimal primary keys
- DBZ-9305 - Duplicate key exception when using postgres connector based on pgoutput plugin
- DBZ-9306 - Archive log only mode does not pause mining when no more data available
- DBZ-9322 - Log all rows from LogMiner session logs during LogMiner failures
- DBZ-9337 - Data loss occurs when connector restarts after failed ad-hoc blocking snapshot
- DBZ-9338 - Events may be mistakenly processed multiple times using multiple tasks
- DBZ-9344 - Allow redo thread flush scn adjustment to be configurable
- DBZ-9345 - Improve performance validation on whether a supplied value is a toast column
- DBZ-9347 - Add, remove, or convert Dev Preview and Tech Preview notes
- DBZ-9349 - Fetching transaction event count can result in NullPointerException
- DBZ-9351 - Add documentation for the LogMiner unbuffered mode
- DBZ-9356 - Issue in ReselectColumnsPostProcessor when field's schema type is BYTES
- DBZ-9358 - MariaDB fails to parse ALTER TABLE using RENAME COLUMN IF EXISTS syntax
- DBZ-9359 - Oracle fails to reselect columns when table structure changes and throws ORA-01466
- DBZ-9366 - Single quotes getting double quotes in a create operation
- DBZ-9367 - MariaDB connector documentation should make clear compressed logs are not supported
- DBZ-9370 - Mining upper boundary is miscalculated when using archive log only mode
- DBZ-9378 - Proper Kafka producer exception not logged due to record.key serialisation error
- DBZ-9397 - Oracle DDL parser exception - DROP MATERIALIZED
- DBZ-9399 - Oracle LastBatchProcessingThroughput should use JdbcRows rather than CountedChanges
- DBZ-9403 - Update JDBC sink connector doc to identify the data types that Debezium does not support
- DBZ-9406 - Oracle connector does not parse syntax : PARALLEL in DDL
- DBZ-9407 - Increase max allowed json string length
- DBZ-9413 - LCR flushing can cause low watermark to be invalidated
- DBZ-9416 - Oracle connector will fail with cryptic error when offset position is no longer valid
- DBZ-9422 - Context headers are added two times during an incremental snapshot
- DBZ-9446 - Oracle connector reselect exception handling (ORA-01555 + ORA-22924)
- DBZ-9470 - Offset position validation for Db2 is not reliable
- DBZ-9472 - OutOfMemory exception when recreating list of tables for snapshot callables
- DBZ-9477 - Debezium Server raise "AttributeNotFoundException QueueTotalCapacity" with SqlServer source
- DBZ-9479 - Getting "Unknown column in 'field list'" when column name contains backtick
- DBZ-9483 - MySQL Event get header throws NullPointerException
- DBZ-9505 - Dropping primary key does not change Oracle relational metadata
- DBZ-9510 - Doc: Document metric `NumberOfErroneousEvents`
- DBZ-9521 - Events are mistakenly skipped during commit dispatch when LOB is enabled
CVEs
(none)
References
(none)
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.