> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamnative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# V4.0.14.4

# StreamNative Weekly Release Notes v4.0.14.4

## Download

### Distributions

* [https://github.com/streamnative/pulsar/releases/tag/v4.0.14.4](https://github.com/streamnative/pulsar/releases/tag/v4.0.14.4)

### Packages

* [Maven Central](https://search.maven.org/artifact/io.streamnative/pulsar/4.0.14.4/pom)

### Images

* [sn-platform](https://hub.docker.com/layers/streamnative/sn-platform/4.0.14.4/images/sha256-bb13cfc7af70decf3ad7f3b021904652ec1d74fe106841d53725577363b244a7)

* [sn-platform-slim](https://hub.docker.com/layers/streamnative/sn-platform-slim/4.0.14.4/images/sha256-d1ca69185da8d1d325c705b6d18c294dc3fc4a3ab5fcc23bba165c0cc9234d14)

* [private-cloud](https://hub.docker.com/layers/streamnative/private-cloud/4.0.14.4/images/sha256-d1ca69185da8d1d325c705b6d18c294dc3fc4a3ab5fcc23bba165c0cc9234d14)

## General Changes

### Apache Pulsar

([#27228](https://github.com/apache/pulsar/pull/27228)) \[improve]\[meta]\[branch-4.0] Upgrade Oxia Java client to 0.10.4

([#27173](https://github.com/apache/pulsar/pull/27173)) \[improve]\[meta]\[branch-4.0] Upgrade Oxia Java client to 0.10.3

([#27180](https://github.com/apache/pulsar/pull/27180)) \[improve]\[misc] Upgrade Jetty to 12.1.14 and Conscrypt to 2.7.0

([#27144](https://github.com/apache/pulsar/pull/27144)) \[fix]\[admin] Fix Pulsar Admin client deadlock caused by AsyncHttpClient's per-host connection limit

([#27125](https://github.com/apache/pulsar/pull/27125)) \[improve]\[broker] Balance partitions across consumers with activeConsumerFailoverConsistentHashing

([#26760](https://github.com/apache/pulsar/pull/26760)) \[improve]\[build] Upgrade Guava to 33.7.1-jre

### MoP

a7adae4a Fix MQTT stats tests with Gson map deserialization changes

### KoP

\[branch-4.0] Bump Pulsar BOM to 4.0.14.4 and align Oxia tests

\[fix] Fix waiting Fetch requests that spin and re-run offset searches

### pulsarctl

fix: install Trivy directly from GitHub Releases

### Cloud Pulsar Plugins

2afa8dba \[CI] Fix free-disk-space action repository reference

\[Rest API Interceptor] Export billing resource usage

\[Rest API Interceptor] Always report resource usage metrics

### Function Mesh Worker Service

f204253b ci: Fix the free-disk-space action reference

\[branch-4.2] Run the CI Oxia server from oxia/oxia:0.16.12

### StreamNative Unified RBAC

Bump the RBAC SDKs to 1.17.3 (4.0)

## Security Fixes

### Apache Pulsar

([#27343](https://github.com/apache/pulsar/pull/27343)) \[fix]\[sec] Upgrade ZooKeeper to 3.9.7 to address several CVEs

([#27311](https://github.com/apache/pulsar/pull/27311)) \[fix]\[sec]\[branch-4.2] Upgrade Netty to 4.1.140 and netty-tcnative to 2.0.85 to address several CVEs and bugs

([#27186](https://github.com/apache/pulsar/pull/27186)) \[fix]\[sec] Upgrade zstd-jni to 1.5.7-25

([#27191](https://github.com/apache/pulsar/pull/27191)) \[fix]\[sec] Upgrade OkHttp to 5.5.1 and Okio to 3.18.2

([#27192](https://github.com/apache/pulsar/pull/27192)) \[fix]\[sec] Upgrade Gson to 2.15.0

([#27193](https://github.com/apache/pulsar/pull/27193)) \[fix]\[sec] Upgrade Byte Buddy to 1.18.16

([#27190](https://github.com/apache/pulsar/pull/27190)) \[fix]\[sec] Upgrade commons-codec to 1.23.0

([#27187](https://github.com/apache/pulsar/pull/27187)) \[fix]\[sec] Upgrade lz4-java to 1.12.1

([#27189](https://github.com/apache/pulsar/pull/27189)) \[fix]\[sec] Upgrade JLine to 4.4.8

([#27184](https://github.com/apache/pulsar/pull/27184)) \[fix]\[sec] Upgrade snappy-java to 1.1.10.12

([#27183](https://github.com/apache/pulsar/pull/27183)) \[fix]\[sec] Upgrade Vert.x to 4.5.35

([#26898](https://github.com/apache/pulsar/pull/26898)) \[fix]\[sec]\[branch-4.x] Upgrade Jackson to 2.18.12

([#27156](https://github.com/apache/pulsar/pull/27156)) \[fix]\[sec] Bump guava to 33.7.2-jre

([#27142](https://github.com/apache/pulsar/pull/27142)) \[fix]\[sec] Bump github.com/go-jose/go-jose/v4 from 4.1.4 to 4.1.6 in /pulsar-function-go

([#27139](https://github.com/apache/pulsar/pull/27139)) \[fix]\[sec] Bump org.xerial.snappy:snappy-java from 1.1.10.8 to 1.1.10.9

([#27138](https://github.com/apache/pulsar/pull/27138)) \[fix]\[sec] Use guava 33.7.1-jre also in jclouds-shaded


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.