Skip to content

Upgrade Zookeeper to 3.8.3 to address CVE-2023-44981#4112

Merged
hangc0276 merged 1 commit into
apache:masterfrom
lhotari:lh-upgrade-zookeeper-3.8.3
Oct 23, 2023
Merged

Upgrade Zookeeper to 3.8.3 to address CVE-2023-44981#4112
hangc0276 merged 1 commit into
apache:masterfrom
lhotari:lh-upgrade-zookeeper-3.8.3

Conversation

@lhotari

@lhotari lhotari commented Oct 19, 2023

Copy link
Copy Markdown
Member

Motivation

OWASP dependency check reports CVE-2023-44981 for Zookeeper.

Changes

Upgrade Zookeeper to 3.8.3.
Release notes: https://zookeeper.apache.org/doc/r3.8.3/releasenotes.html
Also upgrade snappy-java to 1.1.10.5 since Zookeeper depends on that library.

- also upgrade snappy-java that Zookeeper depends on
@lhotari
lhotari force-pushed the lh-upgrade-zookeeper-3.8.3 branch from 40fc0f4 to a6833a5 Compare October 19, 2023 06:01
@hangc0276 hangc0276 added the dependencies Pull requests that update a dependency file label Oct 19, 2023
@hangc0276 hangc0276 added this to the 4.17.0 milestone Oct 19, 2023
@hangc0276
hangc0276 merged commit b33a0c9 into apache:master Oct 23, 2023
yangl pushed a commit to yangl/bookkeeper that referenced this pull request Dec 11, 2023
### Motivation

OWASP dependency check reports CVE-2023-44981 for Zookeeper.

### Changes

Upgrade Zookeeper to 3.8.3.
Release notes: https://zookeeper.apache.org/doc/r3.8.3/releasenotes.html
Also upgrade snappy-java to 1.1.10.5 since Zookeeper depends on that library.
hangc0276 pushed a commit to hangc0276/bookkeeper that referenced this pull request Jan 18, 2024
### Motivation

OWASP dependency check reports CVE-2023-44981 for Zookeeper.

### Changes

Upgrade Zookeeper to 3.8.3.
Release notes: https://zookeeper.apache.org/doc/r3.8.3/releasenotes.html
Also upgrade snappy-java to 1.1.10.5 since Zookeeper depends on that library.

(cherry picked from commit b33a0c9)
Ghatage pushed a commit to sijie/bookkeeper that referenced this pull request Jul 12, 2024
### Motivation

OWASP dependency check reports CVE-2023-44981 for Zookeeper.

### Changes

Upgrade Zookeeper to 3.8.3.
Release notes: https://zookeeper.apache.org/doc/r3.8.3/releasenotes.html
Also upgrade snappy-java to 1.1.10.5 since Zookeeper depends on that library.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cherry-picked/branch-4.16 dependencies Pull requests that update a dependency file release/4.16.4

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants