Skip to content

[fix][sec] Upgrade Zookeeper to 3.9.3 to address CVE-2024-51504 #23581

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
nodece merged 2 commits into from
Nov 12, 2024
Merged

[fix][sec] Upgrade Zookeeper to 3.9.3 to address CVE-2024-51504 #23581

nodece merged 2 commits into from
Nov 12, 2024

Conversation

@lhotari
Copy link
Member

@lhotari lhotari commented Nov 10, 2024 •
edited
Loading

Motivation

Zookeeper 3.9.3 addresses CVE-2024-51504

Modifications

  • Upgrade Zookeeper to 3.9.3
  • Upgrade Curator to 5.7.1 due to incompatibilities in Curator 5.1.0 with Zookeeper 3.9.3

Documentation

  • doc
  • doc-required
  • doc-not-needed
  • doc-complete

@lhotari lhotari added this to the 4.1.0 milestone Nov 10, 2024
@lhotari lhotari self-assigned this Nov 10, 2024
@github-actions github-actions bot added the doc-not-needed Your PR changes do not impact docs label Nov 10, 2024
@codecov-commenter
Copy link

codecov-commenter commented Nov 11, 2024 •
edited
Loading

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 74.35%. Comparing base (bbc6224) to head (54a387b).
Report is 724 commits behind head on master.

Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff              @@
##             master   #23581      +/-   ##
============================================
+ Coverage     73.57%   74.35%   +0.77%     
- Complexity    32624    34952    +2328     
============================================
  Files          1877     1943      +66     
  Lines        139502   147072    +7570     
  Branches      15299    16215     +916     
============================================
+ Hits         102638   109350    +6712     
- Misses        28908    29283     +375     
- Partials       7956     8439     +483
Flag Coverage Δ
inttests 27.40% <ø> (+2.81%) ⬆️
systests 24.36% <ø> (+0.04%) ⬆️
unittests 73.74% <ø> (+0.89%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

see 653 files with indirect coverage changes

@nodece nodece merged commit d7433d0 into apache:master Nov 12, 2024
lhotari added a commit that referenced this pull request Nov 13, 2024
@lhotari
[fix][sec] Upgrade Zookeeper to 3.9.3 to address CVE-2024-51504 (#23581)
787b65a 
(cherry picked from commit d7433d0)
lhotari added a commit that referenced this pull request Nov 13, 2024
@lhotari
[fix][sec] Upgrade Zookeeper to 3.9.3 to address CVE-2024-51504 (#23581)
ce84f8b 
(cherry picked from commit d7433d0)
lhotari added a commit that referenced this pull request Nov 13, 2024
@lhotari
[fix][sec] Upgrade Zookeeper to 3.9.3 to address CVE-2024-51504 (#23581)
b5dfd4b 
(cherry picked from commit d7433d0)
nikhil-ctds pushed a commit to datastax/pulsar that referenced this pull request Nov 20, 2024
@lhotari @nikhil-ctds
[fix][sec] Upgrade Zookeeper to 3.9.3 to address CVE-2024-51504 (apac…
f110dec 
…he#23581)

(cherry picked from commit d7433d0)
(cherry picked from commit b5dfd4b)
srinath-ctds pushed a commit to datastax/pulsar that referenced this pull request Nov 21, 2024
@lhotari @srinath-ctds
[fix][sec] Upgrade Zookeeper to 3.9.3 to address CVE-2024-51504 (apac…
442aa49 
…he#23581)

(cherry picked from commit d7433d0)
(cherry picked from commit b5dfd4b)
hanmz pushed a commit to hanmz/pulsar that referenced this pull request Feb 12, 2025
@lhotari @hanmz
[fix][sec] Upgrade Zookeeper to 3.9.3 to address CVE-2024-51504 (apac…
d6d2924 
…he#23581)
nodece pushed a commit to ascentstream/pulsar that referenced this pull request Apr 30, 2025
@lhotari @nodece
[fix][sec] Upgrade Zookeeper to 3.9.3 to address CVE-2024-51504 (apac…
98e4244 
…he#23581)

(cherry picked from commit d7433d0)
Signed-off-by: Zixuan Liu <nodeces@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@nodece nodece nodece approved these changes

@merlimat merlimat Awaiting requested review from merlimat

@Technoboy- Technoboy- Awaiting requested review from Technoboy-

Assignees

@lhotari lhotari

Labels

area/security cherry-picked/branch-3.0 cherry-picked/branch-3.3 cherry-picked/branch-4.0 doc-not-needed Your PR changes do not impact docs ready-to-test release/3.0.8 release/3.3.3 release/4.0.1

Projects

None yet

Milestone

4.1.0

Development

Successfully merging this pull request may close these issues.

3 participants

@lhotari @codecov-commenter @nodece