Re: [ANNOUNCE] Apache ZooKeeper 3.5.5

2019-05-20 Thread Zili Chen
Congratulations!

rammohan ganapavarapu  于2019年5月21日周二 上午7:25写道:

> Congratulations, finally it's out 
>
> On Mon, May 20, 2019, 11:59 AM Enrico Olivelli 
> wrote:
>
> > Congratulations!
> >
> > Enrico
> >
> > Il lun 20 mag 2019, 19:28 Lars Francke  ha
> > scritto:
> >
> > > Congratulations on this release! It looks great and I'm looking forward
> > to
> > > using all those new features.
> > >
> > > Thank you, everyone, for your work on this.
> > >
> > > On Mon, May 20, 2019 at 7:06 PM Andor Molnar  wrote:
> > >
> > > > The Apache ZooKeeper team is proud to announce Apache ZooKeeper
> version
> > > > 3.5.5
> > > >
> > > > ZooKeeper is a high-performance coordination service for distributed
> > > > applications. It exposes common services - such as naming,
> > > > configuration management, synchronization, and group services - in a
> > > > simple interface so you don't have to write them from scratch. You
> can
> > > > use it off-the-shelf to implement consensus, group management, leader
> > > > election, and presence protocols. And you can build on it for your
> > > > own, specific needs.
> > > >
> > > > For ZooKeeper release details and downloads, visit:
> > > > https://zookeeper.apache.org/releases.html
> > > >
> > > > ZooKeeper 3.5.5 Release Notes are at:
> > > > https://zookeeper.apache.org/doc/r3.5.5/releasenotes.html
> > > >
> > > > We would like to thank the contributors that made the release
> possible.
> > > >
> > > > Regards,
> > > >
> > > > The ZooKeeper Team
> > > >
> > > >
> > > >
> > >
> >
>


Re: [ANNOUNCE] Apache ZooKeeper 3.5.5

2019-05-20 Thread Enrico Olivelli
Congratulations!

Enrico

Il lun 20 mag 2019, 19:28 Lars Francke  ha scritto:

> Congratulations on this release! It looks great and I'm looking forward to
> using all those new features.
>
> Thank you, everyone, for your work on this.
>
> On Mon, May 20, 2019 at 7:06 PM Andor Molnar  wrote:
>
> > The Apache ZooKeeper team is proud to announce Apache ZooKeeper version
> > 3.5.5
> >
> > ZooKeeper is a high-performance coordination service for distributed
> > applications. It exposes common services - such as naming,
> > configuration management, synchronization, and group services - in a
> > simple interface so you don't have to write them from scratch. You can
> > use it off-the-shelf to implement consensus, group management, leader
> > election, and presence protocols. And you can build on it for your
> > own, specific needs.
> >
> > For ZooKeeper release details and downloads, visit:
> > https://zookeeper.apache.org/releases.html
> >
> > ZooKeeper 3.5.5 Release Notes are at:
> > https://zookeeper.apache.org/doc/r3.5.5/releasenotes.html
> >
> > We would like to thank the contributors that made the release possible.
> >
> > Regards,
> >
> > The ZooKeeper Team
> >
> >
> >
>


Re: [ANNOUNCE] Apache ZooKeeper 3.5.5

2019-05-20 Thread Lars Francke
Congratulations on this release! It looks great and I'm looking forward to
using all those new features.

Thank you, everyone, for your work on this.

On Mon, May 20, 2019 at 7:06 PM Andor Molnar  wrote:

> The Apache ZooKeeper team is proud to announce Apache ZooKeeper version
> 3.5.5
>
> ZooKeeper is a high-performance coordination service for distributed
> applications. It exposes common services - such as naming,
> configuration management, synchronization, and group services - in a
> simple interface so you don't have to write them from scratch. You can
> use it off-the-shelf to implement consensus, group management, leader
> election, and presence protocols. And you can build on it for your
> own, specific needs.
>
> For ZooKeeper release details and downloads, visit:
> https://zookeeper.apache.org/releases.html
>
> ZooKeeper 3.5.5 Release Notes are at:
> https://zookeeper.apache.org/doc/r3.5.5/releasenotes.html
>
> We would like to thank the contributors that made the release possible.
>
> Regards,
>
> The ZooKeeper Team
>
>
>


Re: [ANNOUNCE] Apache ZooKeeper 3.5.5

2019-05-20 Thread Jordan Zimmerman
Maven Central shows the first version of 3.5.x as Aug 2014. Here's to a five 
year dev cycle :D But, of course, congrats. 

-JZ

> On May 20, 2019, at 12:25 PM, Jeff Widman  wrote:
> 
> Congrats on dropping the "beta" tag, that's a major milestone!
> 
> Thanks to the team for all your hard work!
> 
> On Mon, May 20, 2019 at 10:06 AM Andor Molnar  wrote:
> 
>> The Apache ZooKeeper team is proud to announce Apache ZooKeeper version
>> 3.5.5
>> 
>> ZooKeeper is a high-performance coordination service for distributed
>> applications. It exposes common services - such as naming,
>> configuration management, synchronization, and group services - in a
>> simple interface so you don't have to write them from scratch. You can
>> use it off-the-shelf to implement consensus, group management, leader
>> election, and presence protocols. And you can build on it for your
>> own, specific needs.
>> 
>> For ZooKeeper release details and downloads, visit:
>> https://zookeeper.apache.org/releases.html
>> 
>> ZooKeeper 3.5.5 Release Notes are at:
>> https://zookeeper.apache.org/doc/r3.5.5/releasenotes.html
>> 
>> We would like to thank the contributors that made the release possible.
>> 
>> Regards,
>> 
>> The ZooKeeper Team
>> 
>> 
>> 
> 
> -- 
> 
> *Jeff Widman*
> jeffwidman.com  | 740-WIDMAN-J (943-6265)
> <><



Re: [ANNOUNCE] Apache ZooKeeper 3.5.5

2019-05-20 Thread Jeff Widman
Congrats on dropping the "beta" tag, that's a major milestone!

Thanks to the team for all your hard work!

On Mon, May 20, 2019 at 10:06 AM Andor Molnar  wrote:

> The Apache ZooKeeper team is proud to announce Apache ZooKeeper version
> 3.5.5
>
> ZooKeeper is a high-performance coordination service for distributed
> applications. It exposes common services - such as naming,
> configuration management, synchronization, and group services - in a
> simple interface so you don't have to write them from scratch. You can
> use it off-the-shelf to implement consensus, group management, leader
> election, and presence protocols. And you can build on it for your
> own, specific needs.
>
> For ZooKeeper release details and downloads, visit:
> https://zookeeper.apache.org/releases.html
>
> ZooKeeper 3.5.5 Release Notes are at:
> https://zookeeper.apache.org/doc/r3.5.5/releasenotes.html
>
> We would like to thank the contributors that made the release possible.
>
> Regards,
>
> The ZooKeeper Team
>
>
>

-- 

*Jeff Widman*
jeffwidman.com  | 740-WIDMAN-J (943-6265)
<><


[CVE-2019-0201] Information disclosure vulnerability in Apache ZooKeeper

2019-05-20 Thread Andor Molnar
CVE-2019-0201: Information disclosure vulnerability in Apache ZooKeeper
 
Severity: Critical
 
Vendor: The Apache Software Foundation
 
Versions Affected: ZooKeeper prior to 3.4.14, ZooKeeper 3.5.0-alpha through 
3.5.4-beta. The unsupported ZooKeeper 1.x through 3.3.x versions may be also 
affected.
 
Description: ZooKeeper’s getACL() command doesn’t check any permission when 
retrieves the ACLs of the requested node and returns all information contained 
in the ACL Id field as plaintext string. DigestAuthenticationProvider overloads 
the Id field with the hash value that is used for user authentication. As a 
consequence, if Digest Authentication is in use, the unsalted hash value will 
be disclosed by getACL() request for unauthenticated or unprivileged users.
 
Mitigation: Use an authentication method other than Digest (e.g. Kerberos) or 
upgrade to 3.4.14 or later (3.5.5 or later if on the 3.5 branch).
 
Credit: This issue was identified by Harrison Neal  
PatchAdvisor, Inc.
 
References: https://issues.apache.org/jira/browse/ZOOKEEPER-1392
 



[ANNOUNCE] Apache ZooKeeper 3.5.5

2019-05-20 Thread Andor Molnar
The Apache ZooKeeper team is proud to announce Apache ZooKeeper version 3.5.5

ZooKeeper is a high-performance coordination service for distributed
applications. It exposes common services - such as naming,
configuration management, synchronization, and group services - in a
simple interface so you don't have to write them from scratch. You can
use it off-the-shelf to implement consensus, group management, leader
election, and presence protocols. And you can build on it for your
own, specific needs.

For ZooKeeper release details and downloads, visit:
https://zookeeper.apache.org/releases.html

ZooKeeper 3.5.5 Release Notes are at:
https://zookeeper.apache.org/doc/r3.5.5/releasenotes.html

We would like to thank the contributors that made the release possible.

Regards,

The ZooKeeper Team