This is an automated email from the ASF dual-hosted git repository.
andor pushed a commit to branch branch-3.7.2
in repository https://gitbox.apache.org/repos/asf/zookeeper.git
The following commit(s) were added to refs/heads/branch-3.7.2 by this push:
new d25e349f4 Release notes for 3.7.2
d25e349f4 is described below
commit d25e349f42ac75898367a75720be05af7aa73649
Author: Andor Molnar <[email protected]>
AuthorDate: Fri Oct 6 09:40:17 2023 +0000
Release notes for 3.7.2
---
.../src/main/resources/markdown/releasenotes.md | 49 ++++++++++++++++++++++
1 file changed, 49 insertions(+)
diff --git a/zookeeper-docs/src/main/resources/markdown/releasenotes.md
b/zookeeper-docs/src/main/resources/markdown/releasenotes.md
index d5203d169..7742842d4 100644
--- a/zookeeper-docs/src/main/resources/markdown/releasenotes.md
+++ b/zookeeper-docs/src/main/resources/markdown/releasenotes.md
@@ -14,6 +14,55 @@ See the License for the specific language governing
permissions and
limitations under the License.
//-->
+# Release Notes - ZooKeeper - Version 3.7.2
+
+## Sub-task
+
+* [ZOOKEEPER-4327](https://issues.apache.org/jira/browse/ZOOKEEPER-4327) -
Flaky test: RequestThrottlerTest
+
+## Bug
+
+* [ZOOKEEPER-4026](https://issues.apache.org/jira/browse/ZOOKEEPER-4026) -
CREATE2 requests embeded in a MULTI request only get a regular CREATE response
+* [ZOOKEEPER-4308](https://issues.apache.org/jira/browse/ZOOKEEPER-4308) -
Flaky test: EagerACLFilterTest.testSetDataFail
+* [ZOOKEEPER-4460](https://issues.apache.org/jira/browse/ZOOKEEPER-4460) -
QuorumPeer overrides Thread.getId with different semantics
+* [ZOOKEEPER-4511](https://issues.apache.org/jira/browse/ZOOKEEPER-4511) -
Flaky test: FileTxnSnapLogMetricsTest.testFileTxnSnapLogMetrics
+* [ZOOKEEPER-4537](https://issues.apache.org/jira/browse/ZOOKEEPER-4537) -
Race between SyncThread and CommitProcessor thread
+* [ZOOKEEPER-4565](https://issues.apache.org/jira/browse/ZOOKEEPER-4565) -
Config watch path get truncated abnormally and fail chroot zookeeper client
+* [ZOOKEEPER-4654](https://issues.apache.org/jira/browse/ZOOKEEPER-4654) - Fix
C client test compilation error in Util.cc.
+* [ZOOKEEPER-4674](https://issues.apache.org/jira/browse/ZOOKEEPER-4674) - C
client tests don't pass on CI
+* [ZOOKEEPER-4721](https://issues.apache.org/jira/browse/ZOOKEEPER-4721) -
Upgrade OWASP Dependency Check to 8.3.1
+
+## Improvement
+
+* [ZOOKEEPER-4545](https://issues.apache.org/jira/browse/ZOOKEEPER-4545) -
Backport auto reloading client key/trust store to 3.7
+* [ZOOKEEPER-4551](https://issues.apache.org/jira/browse/ZOOKEEPER-4551) - Do
not log spammy stacktrace when a client closes its connection
+* [ZOOKEEPER-4602](https://issues.apache.org/jira/browse/ZOOKEEPER-4602) -
Upgrade reload4j due to XXE vulnerability
+* [ZOOKEEPER-4616](https://issues.apache.org/jira/browse/ZOOKEEPER-4616) -
Upgrade docker image for the dev enviroment to resolve CVEs
+* [ZOOKEEPER-4657](https://issues.apache.org/jira/browse/ZOOKEEPER-4657) -
Publish SBOM artifacts
+* [ZOOKEEPER-4659](https://issues.apache.org/jira/browse/ZOOKEEPER-4659) -
Upgrade Commons CLI to 1.5.0 due to OWASP failing on 1.4 CVE-2021-37533
+* [ZOOKEEPER-4660](https://issues.apache.org/jira/browse/ZOOKEEPER-4660) -
Suppress false positive OWASP failure for CVE-2021-37533
+* [ZOOKEEPER-4661](https://issues.apache.org/jira/browse/ZOOKEEPER-4661) -
Upgrade Jackson Databind to 2.13.4.2 for CVE-2022-42003 CVE-2022-42004
+* [ZOOKEEPER-4753](https://issues.apache.org/jira/browse/ZOOKEEPER-4753) -
Explicit handling of DIGEST-MD5 vs GSSAPI in quorum auth
+
+## Task
+
+* [ZOOKEEPER-4599](https://issues.apache.org/jira/browse/ZOOKEEPER-4599) -
Upgrade Jetty to avoid CVE-2022-2048
+* [ZOOKEEPER-4627](https://issues.apache.org/jira/browse/ZOOKEEPER-4627) -
High CVE-2022-2048 in jetty-*-9.4.46.v20220331.jar fixed in 9.4.47
+* [ZOOKEEPER-4632](https://issues.apache.org/jira/browse/ZOOKEEPER-4632) - Fix
NPE from ConnectionMetricsTest.testRevalidateCount
+* [ZOOKEEPER-4641](https://issues.apache.org/jira/browse/ZOOKEEPER-4641) - GH
CI fails with error: implicit declaration of function FIPS_mode
+* [ZOOKEEPER-4649](https://issues.apache.org/jira/browse/ZOOKEEPER-4649) -
Upgrade netty to 4.1.86 because of CVE-2022-41915
+* [ZOOKEEPER-4669](https://issues.apache.org/jira/browse/ZOOKEEPER-4669) -
Upgrade snappy-java to 1.1.9.1 (in order to support M1 macs)
+* [ZOOKEEPER-4688](https://issues.apache.org/jira/browse/ZOOKEEPER-4688) -
Upgrade `cyclonedx-maven-plugin` to 2.7.6
+* [ZOOKEEPER-4707](https://issues.apache.org/jira/browse/ZOOKEEPER-4707) -
Update snappy-java to address multiple CVEs
+* [ZOOKEEPER-4709](https://issues.apache.org/jira/browse/ZOOKEEPER-4709) -
Upgrade Netty to 4.1.94.Final
+* [ZOOKEEPER-4716](https://issues.apache.org/jira/browse/ZOOKEEPER-4716) -
Upgrade jackson to 2.15.2, suppress two false positive CVE errors
+* [ZOOKEEPER-4751](https://issues.apache.org/jira/browse/ZOOKEEPER-4751) -
Update snappy-java to 1.1.10.5 to address CVE-2023-43642
+* [ZOOKEEPER-4754](https://issues.apache.org/jira/browse/ZOOKEEPER-4754) -
Update Jetty to avoid CVE-2023-36479, CVE-2023-40167, and CVE-2023-41900
+* [ZOOKEEPER-4755](https://issues.apache.org/jira/browse/ZOOKEEPER-4755) -
Handle Netty CVE-2023-4586
+
+
+
+
# Release Notes - ZooKeeper - Version 3.7.1
## Improvement
