-
> From: Patrick Hunt
> Sent: Monday, November 25, 2019 9:55 AM
> To: UserZooKeeper
> Subject: Re: Does ZK 3.4.14 support Netty 4.1.42.Final?
>
> This was discussed relatively recently:
> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.apache.org_thread.html
l
>
> -Original Message-
> From: Patrick Hunt
> Sent: Monday, November 25, 2019 9:55 AM
> To: UserZooKeeper
> Subject: Re: Does ZK 3.4.14 support Netty 4.1.42.Final?
>
> This was discussed relatively recently:
&
Sent: Monday, November 25, 2019 9:55 AM
> To: UserZooKeeper
> Subject: Re: Does ZK 3.4.14 support Netty 4.1.42.Final?
>
> This was discussed relatively recently:
>
> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.apache.org_thread.html_680038b345da49a3d5cb452de5d54d62f14d
: Patrick Hunt
Sent: Monday, November 25, 2019 9:55 AM
To: UserZooKeeper
Subject: Re: Does ZK 3.4.14 support Netty 4.1.42.Final?
This was discussed relatively recently:
https://urldefense.proofpoint.com/v2/url?u=https
This was discussed relatively recently:
https://lists.apache.org/thread.html/680038b345da49a3d5cb452de5d54d62f14d1df0747690980c218c1a@%3Cdev.zookeeper.apache.org%3E
Gist is that while the identified issue didn't affect us directly folks
should move to 3.5 (or don't use netty in 3.4) given 3.4 is
Hi Daniel,
I remember that the migration from Netty 3 to 4 wasn't a trivial task, so I
would not expect it in any future ZK 3.4 release.
But we have ZK 3.5.5 and 3.5.6 and the migration to any of them is not
really problematic since they are backward compatible. We have done it for
many Hadoop
Hi,
>From https://mvnrepository.com/artifact/org.apache.zookeeper/zookeeper/3.4.14,
>Zookeeper depends on Netty 3.10.6.Final.
However, Netty has CVEs for versions prior to 4.1.42.Final as per
https://nvd.nist.gov/vuln/detail/CVE-2019-16869:
Netty before 4.1.42.Final mishandles whitespace
