Messages by Thread
-
[jira] [Created] (ZOOKEEPER-5099) Upgrade jackson jars to 2.22.3 or latest to address CVE-2026-91776, CVE-2026-91777
Dhoka Pramod (Jira)
-
[jira] [Created] (ZOOKEEPER-5098) Upgrade netty to 4.1.138 or latest to fix CVE-2026-100655, CVE-2026-100656, CVE-2026-100658, CVE-2026-100666
Dhoka Pramod (Jira)
-
[jira] [Created] (ZOOKEEPER-5097) Add configurable limits to snapshot deserialization (shared by file load, AdminServer restore, and learner sync)
Prasath Jayasundar (Jira)
-
[jira] [Created] (ZOOKEEPER-5096) Quorum TLS fails to form a quorum in 3.9.6 (fips-enabled, default)
Nick (Jira)
-
[jira] [Created] (ZOOKEEPER-5095) Add MinGW-w64 cross-compilation support for the ZooKeeper C client
tony huang (Jira)
-
ZooKeeper C client is looking for maintainer
Andor Molnár
-
[jira] [Created] (ZOOKEEPER-5094) Interrupted TRUNC synchronization can leave follower memory ahead of its transaction log
ZhenyuLi (Jira)
-
[jira] [Created] (ZOOKEEPER-5093) Possible io resource leak in FileTxnSnapLog.close
Kezhu Wang (Jira)
-
[jira] [Created] (ZOOKEEPER-5092) sequence numbers don't increment past Integer.MAX_VALUE
Sean Bridges (Jira)
-
CVE-2026-59739: Apache ZooKeeper: Information disclosure via SetWatches reconnect replay
Andor Molnar
-
CVE-2026-79993: Apache ZooKeeper: Missing ACL check on deleteContainer opcode allows unauthorized deletion of any empty persistent/container znode
Andor Molnar
-
CVE-2026-84439: Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources
Andor Molnar
-
CVE-2026-59969: Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode
Andor Molnar
-
CVE-2026-84501: Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProvider
Andor Molnar
-
Prepare 3.10.0
Andor Molnár
-
[ANNOUNCE] Apache ZooKeeper 3.8.7
Andor Molnár
-
[ANNOUNCE] Apache ZooKeeper 3.9.6
Andor Molnár
-
[jira] [Created] (ZOOKEEPER-5091) WatchManager reports connections with no active watches after consuming the last standard watch
Salvatore Casolaro (Jira)
-
[jira] [Created] (ZOOKEEPER-5090) SnapshotComparer includes ephemeral znodes in comparison output
Salvatore Casolaro (Jira)
-
[jira] [Created] (ZOOKEEPER-5089) Upgrade Website and Docs to new ReactRouter and Vite versions
Yurii Palamarchuk (Jira)
-
[jira] [Created] (ZOOKEEPER-5088) ObserverMaster can omit INFORM packets for proposals received during follower synchronization
ZhenyuLi (Jira)
-
[DISCUSS] Extension points for custom opcodes in the Java client
Михаил Кузьмин
-
[VOTE] Apache ZooKeeper release 3.8.7 candidate 0
Andor Molnár
-
[VOTE] Apache ZooKeeper release 3.9.6 candidate 0
Andor Molnár
-
[jira] [Created] (ZOOKEEPER-5087) Suppress false positive OpenTelemetry CVE-s in OWASP dependency check
Jira
-
[jira] [Created] (ZOOKEEPER-5086) Upgrade Netty to 4.1.137.Final
Jira
-
JLine 3.30 upgrade on JDK 8
Andor Molnár
-
Netty 4.1.136 is flagged
Andor Molnár
-
[jira] [Created] (ZOOKEEPER-5085) Remove unused vulnerable prototype.js from branch-3.9 and branch-3.8
Jira
-
[jira] [Created] (ZOOKEEPER-5084) zk主向从节点同步数据空洞,
Jira
-
[jira] [Created] (ZOOKEEPER-5083) Upgrade Jackson-databind to 2.22.2 to fix known security vulnerabilities
Jira
-
[jira] [Created] (ZOOKEEPER-5082) Remove special characters from username in audit logs
Andor Molnar (Jira)
-
Jackson-databind upgrade on master
Andor Molnár
-
[jira] [Created] (ZOOKEEPER-5081) Exclude zookeeper-website from OWASP Dependency-Check
Yurii Palamarchuk (Jira)
-
[jira] [Created] (ZOOKEEPER-5080) Flaky test: SnapshotAndRestoreCommandTest.testSnapshotAndRestoreCommand_streaming
Ivan Khanas (Jira)
-
[jira] [Created] (ZOOKEEPER-5079) Triage newly detected SpotBugs / findbugs issues after JDK17/25 upgrade
Jira
-
[jira] [Created] (ZOOKEEPER-5078) Upgrade JLine to 3.30.14 to address CVE-2026-56740 and CVE-2026-56741
Shubhi Gupta (Jira)
-
[jira] [Created] (ZOOKEEPER-5077) Upgrade Netty to 4.1.136.Final
Shubhi Gupta (Jira)
-
[jira] [Created] (ZOOKEEPER-5076) Upgrade to JDK 17 in Owasp Jenkinsfile
Andor Molnar (Jira)
-
[DISCUSS] Single purpose TLS extended key usages (EKU) support
Dávid Paksy
-
ZOOKEEPER-4306 / PR #1716 — current status?
Дмитрий Дужинский
-
[jira] [Created] (ZOOKEEPER-5075) Upgrade jline jar to 3.30.14 or higher to fix CVE-2026-56740
Dhoka Pramod (Jira)
-
New committer: Dávid Paksy
Andor Molnár
-
[jira] [Created] (ZOOKEEPER-5074) Quota checks ignore earlier operations in the same multi transaction
Sahil Rajput (Jira)
-
[jira] [Created] (ZOOKEEPER-5073) C client hangs indefinitely when pthread_create fails during initialization
Wenhai Wang (Jira)
-
[jira] [Created] (ZOOKEEPER-5072) Add opt-in warning for slow ZooKeeper Java client callbacks
DongNyoung Lee (Jira)
-
[jira] [Created] (ZOOKEEPER-5071) Fix zookeeper-it NPE compilation failure on Java 17, 21
Jira
-
JDK 27 Rampdown Phase is Closing / G1 in All Environments
David Delabassee via dev
-
[jira] [Created] (ZOOKEEPER-5070) Support Single EKU certificates
Jira
-
[jira] [Created] (ZOOKEEPER-5069) Add AdminServer command to query watch registration details
dong he (Jira)
-
[jira] [Created] (ZOOKEEPER-5068) "Quick Start" link is not found on the website
Yurii Palamarchuk (Jira)
-
[jira] [Created] (ZOOKEEPER-5067) Remove older docs picker from the docs page
Yurii Palamarchuk (Jira)
-
[jira] [Created] (ZOOKEEPER-5066) Add JDK 17, 25 to s390x jenkinsfile
shreya (Jira)
-
[jira] [Created] (ZOOKEEPER-5065) Preserve doap.rdf in website builds
Yurii Palamarchuk (Jira)
-
[jira] [Created] (ZOOKEEPER-5064) Upgrade jackson to fix CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, GHSA-72hv-8253-57qq
Kirti Prajapat (Jira)
-
[jira] [Created] (ZOOKEEPER-5063) ZooKeeper observer master needs to dynamically resolve socket addresses
Li Wang (Jira)
-
[jira] [Created] (ZOOKEEPER-5062) Zookeeper cluster is non operational after DNS issue while zk pod starting
Santosh Kumar Sahu (Jira)
-
[jira] [Created] (ZOOKEEPER-5061) ZooKeeper website fixes
Yurii Palamarchuk (Jira)
-
[jira] [Created] (ZOOKEEPER-5060) Update GitHub Actions versions
Jira
-
https://zookeeper.apache.org/doap.rdf give 404
sebb
-
[jira] [Created] (ZOOKEEPER-5059) Kerberos SASL leaks Login refresh threads across QuorumPeer.shutdown()
Andor Molnar (Jira)
-
[jira] [Created] (ZOOKEEPER-5058) Remove special characters from ensemble name before logging in EnsembleAuthenticationProvider
Andor Molnar (Jira)
-
[jira] [Created] (ZOOKEEPER-5057) Logback CVE vulnerabilities in zookeeper 3.9.5
Badreddine Itani (Jira)
-
[jira] [Created] (ZOOKEEPER-5056) Netty CVE vunrabilities in zookeeper 3.9.5
Badreddine Itani (Jira)
-
[jira] [Created] (ZOOKEEPER-5055) Ensure FileTxnLog.close() closes every stream
Sanjay Malakar (Jira)
-
[jira] [Created] (ZOOKEEPER-5054) Netty client should allow every supported TLS ciphers
Balazs Meszaros (Jira)
-
[jira] [Created] (ZOOKEEPER-5053) Support multiple TLS version in ZooKeeper client
Jira
-
[jira] [Created] (ZOOKEEPER-5052) Fix stale thread write of primitive in JvmPauseMonitor
Jira
-
Netty should be an optional dependency
David Smiley
-
JDK 27 Approaches Rampdown | Final Field Mutation Warnings Heads-up
David Delabassee via dev
-
[jira] [Created] (ZOOKEEPER-5051) 4lw commands during startup can trigger NPE in ZooKeeperServer.removeCnxn and leave connections hanging
MAJ (Jira)
-
[jira] [Created] (ZOOKEEPER-5050) Enhance documentation of AdminServer to highlight security considerations
Andor Molnar (Jira)
-
ZOOKEEPER-5048: Remove default TLS cipher overrides (branch-3.9 backport)
Andor Molnár
-
[jira] [Created] (ZOOKEEPER-5049) PrometheusMetricsProvider logs KeyStore and TrusStore passwords in clear text on INFO level
Jira
-
[jira] [Created] (ZOOKEEPER-5048) Backport ZOOKEEPER-4912: Remove default TLS cipher overrides to branch-3.9
Jira
-
[jira] [Created] (ZOOKEEPER-5047) Make PrometheusMetricsProvider KeyStore type detection consistent
Jira
-
user list filtering?
David Smiley
-
[jira] [Created] (ZOOKEEPER-5046) StaticHostProviderTest fails on Java 21+ due to burningwave NativeDriver incompatibility
Ankit Manoj Jadhav (Jira)
-
Need another committer approval for ZooKeeper PR 2375
Cedric Krumbein via dev
-
[jira] [Created] (ZOOKEEPER-5045) Unable to start in FIPS mode if Java common truststore is not specified
Andor Molnar (Jira)
-
Need help merging an approved PR
Cedric Krumbein via dev
-
[jira] [Created] (ZOOKEEPER-5044) NettyServerCxnxFactory.shutdown must explicitly shut down DefaultEventExecutor
Cedric Krumbein (Jira)
-
[Discussion] JDK25 support / JDK version support on master
Dávid Paksy
-
[jira] [Created] (ZOOKEEPER-5043) Disable fallback to DIGEST-MD5 in SaslServer when Fips mode is set
Andor Molnar (Jira)
-
[jira] [Created] (ZOOKEEPER-5042) Enhance documentation of X-Forwarded-For setting in IPAuthenticationProvider
Andor Molnar (Jira)
-
[jira] [Created] (ZOOKEEPER-5041) Upgrade Netty to fix CVE-2026-33870
Dhoka Pramod (Jira)
-
[jira] [Created] (ZOOKEEPER-5040) Upgrade burningwave mockdns to 0.27.2 for JDK25
Jira
-
[jira] [Created] (ZOOKEEPER-5039) Upgrade Mockito to 5.23.0 for JDK25
Jira
-
ZOOKEEPER-5035 remove loggraph from contrib
Andor Molnár
-
[jira] [Created] (ZOOKEEPER-5038) Upgrade Jetty to address CVE-2026-2332
Jota Martos (Jira)
-
[jira] [Created] (ZOOKEEPER-5037) Add export and import commands to the CLI
Cedric Krumbein (Jira)
-
Java 26 Is Now Available | JDK 27 Heads-Ups
David Delabassee via dev
-
[jira] [Created] (ZOOKEEPER-5036) Add Timeline Metrics Provider for external metrics collection systems
Himanshu Maurya (Jira)
-
[jira] [Created] (ZOOKEEPER-5035) remove loggraph from contrib
Patrick D. Hunt (Jira)
-
Fwd: [Discussion] Transaction log zxid continuity validation during startup recovery
Zack_Qiu
-
[DISCUSS] The New ZooKeeper Website
Yurii Palamarchuk