This is an automated email from the ASF dual-hosted git repository. lhotari pushed a commit to branch branch-3.3 in repository https://gitbox.apache.org/repos/asf/pulsar.git
commit ce84f8be799fca603686d8eea62852df85c55cad Author: Lari Hotari <[email protected]> AuthorDate: Tue Nov 12 03:09:14 2024 +0000 [fix][sec] Upgrade Zookeeper to 3.9.3 to address CVE-2024-51504 (#23581) (cherry picked from commit d7433d0f3d383651bd0c49b1858ebf7da50dbe1c) --- distribution/server/src/assemble/LICENSE.bin.txt | 12 ++++++------ pom.xml | 4 ++-- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt index fcc6dbea93b..56fabc398c1 100644 --- a/distribution/server/src/assemble/LICENSE.bin.txt +++ b/distribution/server/src/assemble/LICENSE.bin.txt @@ -463,9 +463,9 @@ The Apache Software License, Version 2.0 - org.apache.avro-avro-1.11.4.jar - org.apache.avro-avro-protobuf-1.11.4.jar * Apache Curator - - org.apache.curator-curator-client-5.1.0.jar - - org.apache.curator-curator-framework-5.1.0.jar - - org.apache.curator-curator-recipes-5.1.0.jar + - org.apache.curator-curator-client-5.7.1.jar + - org.apache.curator-curator-framework-5.7.1.jar + - org.apache.curator-curator-recipes-5.7.1.jar * Apache Yetus - org.apache.yetus-audience-annotations-0.12.0.jar * Kubernetes Client @@ -497,9 +497,9 @@ The Apache Software License, Version 2.0 - io.vertx-vertx-web-4.5.10.jar - io.vertx-vertx-web-common-4.5.10.jar * Apache ZooKeeper - - org.apache.zookeeper-zookeeper-3.9.2.jar - - org.apache.zookeeper-zookeeper-jute-3.9.2.jar - - org.apache.zookeeper-zookeeper-prometheus-metrics-3.9.2.jar + - org.apache.zookeeper-zookeeper-3.9.3.jar + - org.apache.zookeeper-zookeeper-jute-3.9.3.jar + - org.apache.zookeeper-zookeeper-prometheus-metrics-3.9.3.jar * Snappy Java - org.xerial.snappy-snappy-java-1.1.10.5.jar * Google HTTP Client diff --git a/pom.xml b/pom.xml index b85d2789f62..35297a860f4 100644 --- a/pom.xml +++ b/pom.xml @@ -137,12 +137,12 @@ flexible messaging model and an intuitive client API.</description> <commons-compress.version>1.26.0</commons-compress.version> <bookkeeper.version>4.17.1</bookkeeper.version> - <zookeeper.version>3.9.2</zookeeper.version> + <zookeeper.version>3.9.3</zookeeper.version> <commons-cli.version>1.5.0</commons-cli.version> <commons-text.version>1.10.0</commons-text.version> <snappy.version>1.1.10.5</snappy.version> <!-- ZooKeeper server --> <dropwizardmetrics.version>4.1.12.1</dropwizardmetrics.version> <!-- ZooKeeper server --> - <curator.version>5.1.0</curator.version> + <curator.version>5.7.1</curator.version> <netty.version>4.1.113.Final</netty.version> <netty-iouring.version>0.0.24.Final</netty-iouring.version> <jetty.version>9.4.56.v20240826</jetty.version>
