FWIW, we’re running zookeeper on Java 21 From: Enrico Olivelli <eolive...@gmail.com> Date: Wednesday, June 4, 2025 at 7:48 AM To: user@zookeeper.apache.org <user@zookeeper.apache.org> Subject: Re: Re: Zookeeper with latest jetty version We can update in on master and cut a release
Enrico Il Mer 4 Giu 2025, 12:40 Chris T. <c.turks...@gmail.com> ha scritto: > Not updating Jetty will cause issues for companies with strict > vulnerability scanning and remediation policies. ("fix it or stop using > it" ) > > Maybe it's time for a Java17 Zookeeper branch. > > > On 4 June 2025 12:25:51 Andrew A <the22bestand...@gmail.com> wrote: > > > Jetty 9-11 stopped getting security updates in January. But, 12 requires > a > > minimum Java version of 17. > > > > See: > > https://protect.checkpoint.com/v2/r01/___https://github.com/jetty/jetty.project/issues/7958___.YzJ1OmNvZmVuc2U6YzpvOjdlZGMxYjQwMTZmNjE3NTNlZTUwYjQxZTBmZjQ2MDU0Ojc6NDVhYzpmNmQ2MDJlNTQ5ZGY2MmRjMDI1NWZjMWQ2Zjg4ZWVhNjBiM2MyOWVmYjU4OTI1YzE0YWNmM2JjMzE5MTE0MWJjOnA6VDpO<https://protect.checkpoint.com/v2/r01/___https:/github.com/jetty/jetty.project/issues/7958___.YzJ1OmNvZmVuc2U6YzpvOjdlZGMxYjQwMTZmNjE3NTNlZTUwYjQxZTBmZjQ2MDU0Ojc6NDVhYzpmNmQ2MDJlNTQ5ZGY2MmRjMDI1NWZjMWQ2Zjg4ZWVhNjBiM2MyOWVmYjU4OTI1YzE0YWNmM2JjMzE5MTE0MWJjOnA6VDpO> > > https://protect.checkpoint.com/v2/r01/___https://github.com/jetty/jetty.project/issues/10485___.YzJ1OmNvZmVuc2U6YzpvOjdlZGMxYjQwMTZmNjE3NTNlZTUwYjQxZTBmZjQ2MDU0Ojc6NTI5NzphZDM5NTk1MzViMGEwZGY1YmIwMDU5YTNlN2M4YTJkM2EzNGMwNThlNmZiMzFiZWZmNWM0ZmU0NWIzOGI0YzdhOnA6VDpO<https://protect.checkpoint.com/v2/r01/___https:/github.com/jetty/jetty.project/issues/10485___.YzJ1OmNvZmVuc2U6YzpvOjdlZGMxYjQwMTZmNjE3NTNlZTUwYjQxZTBmZjQ2MDU0Ojc6NTI5NzphZDM5NTk1MzViMGEwZGY1YmIwMDU5YTNlN2M4YTJkM2EzNGMwNThlNmZiMzFiZWZmNWM0ZmU0NWIzOGI0YzdhOnA6VDpO> > > > > > > > > On 2025/06/03 20:53:43 Matthias Sohn wrote: > > > >> On Tue, Jun 3, 2025 at 6:53 PM Yvette Sermons > > > >> <yv...@oracle.com.invalid> wrote: > > > >> > > > >>> Hello > > > >>> Can Zookeeper 3.9.3 be upgraded to use the latest jetty version: > > > >>> 9.4.57.v20241219< > > > >>> > > > https://protect.checkpoint.com/v2/r01/___https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-server/9.4.57.v20241219___.YzJ1OmNvZmVuc2U6YzpvOjdlZGMxYjQwMTZmNjE3NTNlZTUwYjQxZTBmZjQ2MDU0Ojc6MjY1MDo4OTA2ZWY2ZDQxZDNhYTA2NThiMDkxMjlmM2Q4OTM4YTRmMGYzZDYyZDY1MDQ5ODgzOTZlMDljZmE5MDA2MWMzOnA6VDpO<https://protect.checkpoint.com/v2/r01/___https:/mvnrepository.com/artifact/org.eclipse.jetty/jetty-server/9.4.57.v20241219___.YzJ1OmNvZmVuc2U6YzpvOjdlZGMxYjQwMTZmNjE3NTNlZTUwYjQxZTBmZjQ2MDU0Ojc6MjY1MDo4OTA2ZWY2ZDQxZDNhYTA2NThiMDkxMjlmM2Q4OTM4YTRmMGYzZDYyZDY1MDQ5ODgzOTZlMDljZmE5MDA2MWMzOnA6VDpO> > >> > > > >>> > > > >>> > > > https://protect.checkpoint.com/v2/r01/___https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-server/9.4.57.v20241219___.YzJ1OmNvZmVuc2U6YzpvOjdlZGMxYjQwMTZmNjE3NTNlZTUwYjQxZTBmZjQ2MDU0Ojc6YzhlYjo2ODE0YjA3OWY2MjQ1MzFjODdhYThjZjUwYTY2ZTdiZjk4NDAxYzU3ZmNhNGM2MThlNmM3ZDU3MWM2MWY3YmJlOnA6VDpO<https://protect.checkpoint.com/v2/r01/___https:/mvnrepository.com/artifact/org.eclipse.jetty/jetty-server/9.4.57.v20241219___.YzJ1OmNvZmVuc2U6YzpvOjdlZGMxYjQwMTZmNjE3NTNlZTUwYjQxZTBmZjQ2MDU0Ojc6YzhlYjo2ODE0YjA3OWY2MjQ1MzFjODdhYThjZjUwYTY2ZTdiZjk4NDAxYzU3ZmNhNGM2MThlNmM3ZDU3MWM2MWY3YmJlOnA6VDpO> > > > >>> There is a vulnerability in 9.4.56 version. > > > >>> > > > >> > > > >> AFAICS all Jetty versions < 12 are EOL. See > > https://protect.checkpoint.com/v2/r01/___https://jetty.org/download.html___.YzJ1OmNvZmVuc2U6YzpvOjdlZGMxYjQwMTZmNjE3NTNlZTUwYjQxZTBmZjQ2MDU0Ojc6YWMzMzo5NDcxZDYxOWQ5YmEwZDFhNGM2ZjJkZDdlM2UxYmU2NTcwZTc5ZjA4OTM0ZmIwMWQ3ZWZjZTc2NTlmMDllOGE3OnA6VDpO<https://protect.checkpoint.com/v2/r01/___https:/jetty.org/download.html___.YzJ1OmNvZmVuc2U6YzpvOjdlZGMxYjQwMTZmNjE3NTNlZTUwYjQxZTBmZjQ2MDU0Ojc6YWMzMzo5NDcxZDYxOWQ5YmEwZDFhNGM2ZjJkZDdlM2UxYmU2NTcwZTc5ZjA4OTM0ZmIwMWQ3ZWZjZTc2NTlmMDllOGE3OnA6VDpO> > > > >> > > > >> > > > >>> > > > >>> Thanks > > > >>> Yvette Sermons | Senior Development Manager > > > >>> ORACLE Construction and Engineering > > > >>> 610.766.3735 > > > >>> > > > >> > >