HBASE-28178 Upgrade ZooKeeper for CVE-2023-44981 #5479

apurtell · 2023-10-26T00:23:32Z

CVE-2023-44981 is a high scoring authorization bypass vulnerability in ZooKeeper related to SASL quorum authentication.
Minimum fix version is 3.7.2. Use that.

CVE-2023-44981 is a high scoring authorization bypass vulnerability in ZooKeeper related to SASL quorum authentication. Minimum fix version is 3.7.2. Use that.

Apache-HBase · 2023-10-26T01:08:37Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 30s	Docker mode activated.
		_ Prechecks _
+1 💚	dupname	0m 0s	No case conflicting files found.
+1 💚	@author	0m 0s	The patch does not contain any @author tags.
		_ master Compile Tests _
+0 🆗	mvndep	0m 17s	Maven dependency ordering for branch
+1 💚	mvninstall	2m 49s	master passed
+1 💚	compile	4m 53s	master passed
+1 💚	spotless	0m 43s	branch has no errors when running spotless:check.
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 16s	Maven dependency ordering for patch
+1 💚	mvninstall	2m 36s	the patch passed
+1 💚	compile	4m 57s	the patch passed
+1 💚	javac	4m 57s	the patch passed
+1 💚	whitespace	0m 0s	The patch has no whitespace issues.
+1 💚	xml	0m 3s	The patch has no ill-formed XML file.
+1 💚	hadoopcheck	9m 17s	Patch does not cause any errors with Hadoop 3.2.4 3.3.6.
+1 💚	spotless	0m 41s	patch has no errors when running spotless:check.
		_ Other Tests _
+1 💚	asflicense	0m 22s	The patch does not generate ASF License warnings.
		33m 11s

Subsystem	Report/Notes
Docker	ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/1/artifact/yetus-general-check/output/Dockerfile
GITHUB PR	#5479
Optional Tests	dupname asflicense javac hadoopcheck spotless xml compile
uname	Linux 4c2ff7149fc7 5.4.0-156-generic #173-Ubuntu SMP Tue Jul 11 07:25:22 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	master / `e473346`
Default Java	Eclipse Adoptium-11.0.17+8
Max. process+thread count	82 (vs. ulimit of 30000)
modules	C: hbase-zookeeper . U: .
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/1/console
versions	git=2.34.1 maven=3.8.6
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2023-10-26T06:14:49Z

💔 -1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 11s	Docker mode activated.
-0 ⚠️	yetus	0m 3s	Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
		_ Prechecks _
		_ master Compile Tests _
+0 🆗	mvndep	0m 16s	Maven dependency ordering for branch
+1 💚	mvninstall	2m 22s	master passed
+1 💚	compile	1m 33s	master passed
+1 💚	shadedjars	4m 41s	branch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	1m 35s	master passed
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 15s	Maven dependency ordering for patch
+1 💚	mvninstall	2m 21s	the patch passed
+1 💚	compile	1m 34s	the patch passed
+1 💚	javac	1m 34s	the patch passed
+1 💚	shadedjars	4m 46s	patch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	1m 35s	the patch passed
		_ Other Tests _
-1 ❌	unit	312m 42s	root in the patch failed.
		339m 20s

Subsystem	Report/Notes
Docker	ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/1/artifact/yetus-jdk8-hadoop3-check/output/Dockerfile
GITHUB PR	#5479
Optional Tests	javac javadoc unit shadedjars compile
uname	Linux a2bff80716a6 5.4.0-153-generic #170-Ubuntu SMP Fri Jun 16 13:43:31 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	master / `e473346`
Default Java	Temurin-1.8.0_352-b08
unit	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/1/artifact/yetus-jdk8-hadoop3-check/output/patch-unit-root.txt
Test Results	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/1/testReport/
Max. process+thread count	5005 (vs. ulimit of 30000)
modules	C: hbase-zookeeper . U: .
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/1/console
versions	git=2.34.1 maven=3.8.6
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

virajjasani · 2023-10-26T06:17:36Z

TestZookeeper test failure might be relevant? let me retrigger the build

Apache9 · 2023-10-26T06:26:14Z

See https://issues.apache.org/jira/browse/HBASE-28153 and #5475

Apache-HBase · 2023-10-26T06:32:35Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 41s	Docker mode activated.
-0 ⚠️	yetus	0m 2s	Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
		_ Prechecks _
		_ master Compile Tests _
+0 🆗	mvndep	0m 17s	Maven dependency ordering for branch
+1 💚	mvninstall	3m 29s	master passed
+1 💚	compile	2m 24s	master passed
+1 💚	shadedjars	5m 27s	branch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	2m 18s	master passed
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 16s	Maven dependency ordering for patch
+1 💚	mvninstall	3m 11s	the patch passed
+1 💚	compile	2m 16s	the patch passed
+1 💚	javac	2m 16s	the patch passed
+1 💚	shadedjars	5m 44s	patch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	2m 25s	the patch passed
		_ Other Tests _
+1 💚	unit	321m 32s	root in the patch passed.
		357m 13s

Subsystem	Report/Notes
Docker	ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/1/artifact/yetus-jdk11-hadoop3-check/output/Dockerfile
GITHUB PR	#5479
Optional Tests	javac javadoc unit shadedjars compile
uname	Linux 2f4424ff7a50 5.4.0-163-generic #180-Ubuntu SMP Tue Sep 5 13:21:23 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	master / `e473346`
Default Java	Eclipse Adoptium-11.0.17+8
Test Results	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/1/testReport/
Max. process+thread count	8228 (vs. ulimit of 30000)
modules	C: hbase-zookeeper . U: .
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/1/console
versions	git=2.34.1 maven=3.8.6
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2023-10-26T07:19:32Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 51s	Docker mode activated.
		_ Prechecks _
+1 💚	dupname	0m 0s	No case conflicting files found.
+1 💚	@author	0m 0s	The patch does not contain any @author tags.
		_ master Compile Tests _
+0 🆗	mvndep	0m 15s	Maven dependency ordering for branch
+1 💚	mvninstall	3m 54s	master passed
+1 💚	compile	6m 17s	master passed
+1 💚	spotless	0m 49s	branch has no errors when running spotless:check.
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 13s	Maven dependency ordering for patch
+1 💚	mvninstall	3m 45s	the patch passed
+1 💚	compile	6m 57s	the patch passed
+1 💚	javac	6m 57s	the patch passed
+1 💚	whitespace	0m 0s	The patch has no whitespace issues.
+1 💚	xml	0m 5s	The patch has no ill-formed XML file.
+1 💚	hadoopcheck	12m 47s	Patch does not cause any errors with Hadoop 3.2.4 3.3.6.
+1 💚	spotless	0m 59s	patch has no errors when running spotless:check.
		_ Other Tests _
+1 💚	asflicense	0m 22s	The patch does not generate ASF License warnings.
		45m 46s

Subsystem	Report/Notes
Docker	ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/2/artifact/yetus-general-check/output/Dockerfile
GITHUB PR	#5479
Optional Tests	dupname asflicense javac hadoopcheck spotless xml compile
uname	Linux f24f94aafc0e 5.4.0-163-generic #180-Ubuntu SMP Tue Sep 5 13:21:23 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	master / `e473346`
Default Java	Eclipse Adoptium-11.0.17+8
Max. process+thread count	78 (vs. ulimit of 30000)
modules	C: hbase-zookeeper . U: .
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/2/console
versions	git=2.34.1 maven=3.8.6
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2023-10-26T11:51:37Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 51s	Docker mode activated.
-0 ⚠️	yetus	0m 3s	Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
		_ Prechecks _
		_ master Compile Tests _
+0 🆗	mvndep	0m 18s	Maven dependency ordering for branch
+1 💚	mvninstall	4m 1s	master passed
+1 💚	compile	2m 47s	master passed
+1 💚	shadedjars	6m 3s	branch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	3m 9s	master passed
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 20s	Maven dependency ordering for patch
+1 💚	mvninstall	3m 21s	the patch passed
+1 💚	compile	2m 43s	the patch passed
+1 💚	javac	2m 43s	the patch passed
+1 💚	shadedjars	5m 43s	patch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	2m 41s	the patch passed
		_ Other Tests _
+1 💚	unit	279m 0s	root in the patch passed.
		317m 50s

Subsystem	Report/Notes
Docker	ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/2/artifact/yetus-jdk11-hadoop3-check/output/Dockerfile
GITHUB PR	#5479
Optional Tests	javac javadoc unit shadedjars compile
uname	Linux 0442149acadd 5.4.0-163-generic #180-Ubuntu SMP Tue Sep 5 13:21:23 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	master / `e473346`
Default Java	Eclipse Adoptium-11.0.17+8
Test Results	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/2/testReport/
Max. process+thread count	8131 (vs. ulimit of 30000)
modules	C: hbase-zookeeper . U: .
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/2/console
versions	git=2.34.1 maven=3.8.6
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2023-10-26T13:39:11Z

🎊 +1 overall

Vote	Subsystem	Runtime	Comment
+0 🆗	reexec	0m 10s	Docker mode activated.
-0 ⚠️	yetus	0m 3s	Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list --whitespace-tabs-ignore-list --quick-hadoopcheck
		_ Prechecks _
		_ master Compile Tests _
+0 🆗	mvndep	0m 16s	Maven dependency ordering for branch
+1 💚	mvninstall	2m 18s	master passed
+1 💚	compile	1m 36s	master passed
+1 💚	shadedjars	4m 39s	branch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	1m 34s	master passed
		_ Patch Compile Tests _
+0 🆗	mvndep	0m 15s	Maven dependency ordering for patch
+1 💚	mvninstall	2m 15s	the patch passed
+1 💚	compile	1m 40s	the patch passed
+1 💚	javac	1m 40s	the patch passed
+1 💚	shadedjars	4m 47s	patch has no errors when building our shaded downstream artifacts.
+1 💚	javadoc	1m 35s	the patch passed
		_ Other Tests _
+1 💚	unit	397m 59s	root in the patch passed.
		425m 26s

Subsystem	Report/Notes
Docker	ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/2/artifact/yetus-jdk8-hadoop3-check/output/Dockerfile
GITHUB PR	#5479
Optional Tests	javac javadoc unit shadedjars compile
uname	Linux 350d3f52ee22 5.4.0-153-generic #170-Ubuntu SMP Fri Jun 16 13:43:31 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	master / `e473346`
Default Java	Temurin-1.8.0_352-b08
Test Results	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/2/testReport/
Max. process+thread count	7935 (vs. ulimit of 30000)
modules	C: hbase-zookeeper . U: .
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5479/2/console
versions	git=2.34.1 maven=3.8.6
Powered by	Apache Yetus 0.12.0 https://yetus.apache.org

This message was automatically generated.

apurtell · 2023-10-26T16:26:13Z

Ah, ok, let me close this as a dup of #5475

HBASE-28178 Upgrade ZooKeeper on all branches for CVE-2023-44981

0b39931

CVE-2023-44981 is a high scoring authorization bypass vulnerability in ZooKeeper related to SASL quorum authentication. Minimum fix version is 3.7.2. Use that.

apurtell requested a review from virajjasani October 26, 2023 00:23

apurtell changed the title ~~HBASE-28178 Upgrade ZooKeeper on all branches for CVE-2023-44981~~ HBASE-28178 Upgrade ZooKeeper for CVE-2023-44981 Oct 26, 2023

apurtell closed this Oct 26, 2023

apurtell mentioned this pull request Oct 26, 2023

HBASE-28153 Upgrade zookeeper to a newer version #5475

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

HBASE-28178 Upgrade ZooKeeper for CVE-2023-44981 #5479

HBASE-28178 Upgrade ZooKeeper for CVE-2023-44981 #5479

Uh oh!

apurtell commented Oct 26, 2023

Uh oh!

Apache-HBase commented Oct 26, 2023

Uh oh!

Apache-HBase commented Oct 26, 2023

Uh oh!

virajjasani commented Oct 26, 2023

Uh oh!

Apache9 commented Oct 26, 2023

Uh oh!

Apache-HBase commented Oct 26, 2023

Uh oh!

Apache-HBase commented Oct 26, 2023

Uh oh!

Apache-HBase commented Oct 26, 2023

Uh oh!

Apache-HBase commented Oct 26, 2023

Uh oh!

apurtell commented Oct 26, 2023

Uh oh!

Uh oh!

HBASE-28178 Upgrade ZooKeeper for CVE-2023-44981 #5479

HBASE-28178 Upgrade ZooKeeper for CVE-2023-44981 #5479

Uh oh!

Conversation

apurtell commented Oct 26, 2023

Uh oh!

Apache-HBase commented Oct 26, 2023

Uh oh!

Apache-HBase commented Oct 26, 2023

Uh oh!

virajjasani commented Oct 26, 2023

Uh oh!

Apache9 commented Oct 26, 2023

Uh oh!

Apache-HBase commented Oct 26, 2023

Uh oh!

Apache-HBase commented Oct 26, 2023

Uh oh!

Apache-HBase commented Oct 26, 2023

Uh oh!

Apache-HBase commented Oct 26, 2023

Uh oh!

apurtell commented Oct 26, 2023

Uh oh!

Uh oh!