[
https://issues.apache.org/jira/browse/HBASE-28178?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andrew Kyle Purtell updated HBASE-28178:
----------------------------------------
Fix Version/s: (was: 2.6.0)
(was: 2.4.18)
(was: 3.0.0-beta-1)
(was: 4.0.0-alpha-1)
(was: 2.5.7)
Assignee: (was: Andrew Kyle Purtell)
Resolution: Duplicate
Status: Resolved (was: Patch Available)
> Upgrade ZooKeeper for CVE-2023-44981
> ------------------------------------
>
> Key: HBASE-28178
> URL: https://issues.apache.org/jira/browse/HBASE-28178
> Project: HBase
> Issue Type: Task
> Reporter: Andrew Kyle Purtell
> Priority: Major
>
> CVE-2023-44981 is a high scoring (9.1/10) authentication bypass vulnerability
> in ZooKeeper related to SASL quorum authentication. The bug is fixed in
> versions 3.7.2, 3.8.3, and 3.9.1.
> Upgrade ZK versions on all active branches. At least 3.7.2.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
