# Redpanda v25.3.16

- Product: Redpanda (https://whatsnew.fyi/product/redpanda)
- Vendor: Redpanda Data
- Date: 2026-08-13
- Version: v25.3.16
- Original notes: https://github.com/redpanda-data/redpanda/releases/tag/v25.3.16
- Permalink: https://whatsnew.fyi/product/redpanda/releases/v25.3.16

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Changes to cloud_storage_throughput_limit_percent cluster config now take effect at runtime instead of being ignored until restart
- **fixed** — Fix consumer group lag metrics inflated after retention or trim-prefix
- **fixed** — Fix consumer group lag metrics reporting 0 for read-replica topics
- **fixed** — Fixed a crash that could occur when removing a partition with a very large number of log segments
- **fixed** — Fixed a crash where a snapshot write failing on a full disk aborted the node with a misleading assertion instead of surfacing the I/O error
- **security** — Fixed a double-free / use-after-free in c-ares query-completion handling (CVE-2026-33630)
- **fixed** — Fixed a leak in the Iceberg translation subsystem where per-partition metrics were not released after a partition was removed from a broker
- **fixed** — Fixed a race in the internal Kafka client where a concurrent request on a freshly established SASL connection could be sent before authentication finished
- **fixed** — Fixes a bug in OffsetForLeaderEpoch handling with tiered topics which could cause consumers to reset their fetch position to the beginning of the log held in cloud storage
- **fixed** — Fixes a bug in which a generate_report() request to the transform system could result in a nullptr dereference at startup
- **fixed** — Fixes a bug in which hung requests to the schema registry or in shadow linking could cause a deadlock during shutdown
- **fixed** — Fixes a reactor stall seen when there are a large number of pending files in the Iceberg Topics coordinator
- **fixed** — Fixes a wedge in multi-output transforms where a produce failure on one output topic silently stalled the processor instead of restarting it
- **fixed** — HTTP Proxy: Consumer group fetches no longer fail indefinitely with offset_out_of_range after retention moves a topic's log start offset past 0
- **fixed** — Lifecycle fix on groups
- **security** — Upgrade krb5 to 1.22.2 to address CVE-2026-40355 and CVE-2026-40356
- **security** — Upgraded Go toolchain to 1.26.5 to address CVE-2026-39822
- **security** — Upgraded OpenSSL from 3.0.20 to 3.0.21
- **fixed** — Fixed a rare condition where Tiered Storage metadata spillover could get permanently stuck on partitions with small, frequent segments
- **fixed** — Fixed an allocation double-free triggered by no-op replication-factor changes

##### Bug Fixes
* Changes to `cloud_storage_throughput_limit_percent` cluster config now take effect at runtime instead of being ignored until restart. by @nvartolomei in [#30232](https://github.com/redpanda-data/redpanda/pull/30232)
* Fix consumer group lag metrics inflated after retention or trim-prefix. by @bartoszpiekny-redpanda in [#30902](https://github.com/redpanda-data/redpanda/pull/30902)
* Fix consumer group lag metrics reporting 0 for read-replica topics. by @bartoszpiekny-redpanda in [#30950](https://github.com/redpanda-data/redpanda/pull/30950)
* Fixed a crash that could occur when removing a partition with a very large number of log segments, e.g. during partition rebalancing. by @pgellert in [#31504](https://github.com/redpanda-data/redpanda/pull/31504)
* Fixed a crash where a snapshot write failing on a full disk (ENOSPC) aborted the node with a misleading "snapshot writer has to be closed" assertion instead of surfacing the I/O error. by @nvartolomei in [#31188](https://github.com/redpanda-data/redpanda/pull/31188)
* Fixed a double-free / use-after-free in c-ares query-completion handling (CVE-2026-33630). by @bartoszpiekny-redpanda in [#31485](https://github.com/redpanda-data/redpanda/pull/31485)
* Fixed a leak in the Iceberg translation subsystem where per-partition metrics were not released after a partition was removed from a broker. by @nvartolomei in [#30705](https://github.com/redpanda-data/redpanda/pull/30705)
* Fixed a race in the internal Kafka client where a concurrent request on a freshly established SASL connection could be sent before authentication finished, causing the broker to drop the connection. by @nvartolomei in [#31191](https://github.com/redpanda-data/redpanda/pull/31191)
* Fixes a bug in `OffsetForLeaderEpoch` handling with `tiered` topics which could cause consumers to reset their fetch position to the beginning of the log held in cloud storage. by @WillemKauf in [#31075](https://github.com/redpanda-data/redpanda/pull/31075)
* Fixes a bug in which a `generate_report()` request to the `transform` system could result in a `nullptr` dereference at startup. by @WillemKauf in [#30911](https://github.com/redpanda-data/redpanda/pull/30911)
* Fixes a bug in which hung requests to the schema registry or in shadow linking could cause a deadlock during shutdown. by @WillemKauf in [#30789](https://github.com/redpanda-data/redpanda/pull/30789)
* Fixes a reactor stall seen when there are a large number of pending files in the Iceberg Topics coordinator. by @andrwng in [#30881](https://github.com/redpanda-data/redpanda/pull/30881)
* Fixes a wedge in multi-output transforms where a produce failure on one output topic silently stalled the processor instead of restarting it. by @WillemKauf in [#30856](https://github.com/redpanda-data/redpanda/pull/30856)
* HTTP Proxy: Consumer group fetches no longer fail indefinitely with offset_out_of_range after retention moves a topic's log start offset past 0; the consumer now recovers to the earliest available offset (auto.offset.reset=earliest). by @bartoszpiekny-redpanda in [#31208](https://github.com/redpanda-data/redpanda/pull/31208)
* Lifecycle fix on groups. by @joe-redpanda in [#31183](https://github.com/redpanda-data/redpanda/pull/31183)
* Upgrade krb5 to 1.22.2 to address CVE-2026-40355 and CVE-2026-40356 (NegoEx parsing vulnerabilities). by @tyson-redpanda in [#30875](https://github.com/redpanda-data/redpanda/pull/30875)
* Upgraded Go toolchain to 1.26.5 to address CVE-2026-39822 (os.Root symlink escape). by @bartoszpiekny-redpanda in [#31487](https://github.com/redpanda-data/redpanda/pull/31487)
* Upgraded OpenSSL from 3.0.20 to 3.0.21 to resolve CVEs fixed in the 3.0.21 release (2026-06-09). by @tyson-redpanda in [#30812](https://github.com/redpanda-data/redpanda/pull/30812)
* Fixed a rare condition where Tiered Storage metadata spillover could get permanently stuck on partitions with small, frequent segments, repeatedly logging "Ca

_[Truncated at 4000 characters — full notes: https://github.com/redpanda-data/redpanda/releases/tag/v25.3.16]_