I don't understand why that would be a blocker. It is already known that it's a false positive. It shouldn't be considered a blocker. Knowing it's a false positive, PMC members can just vote it through anyway.
On Tue, Apr 19, 2022, 02:59 Mohammad arshad <mohammad.ars...@huawei.com.invalid> wrote: > Hello Everyone > > I could not make the release candidate 0 as per the plan. It is delayed > because of one blocker CVE issue ZOOKEEPER-4510. > I will cut the RC0 as soon as the blocker issue is resolved. > > Thanks & Regards > Arshad > > > -----Original Message----- > From: Mohammad arshad > Sent: Wednesday, March 23, 2022 1:42 PM > To: DevZooKeeper <dev@zookeeper.apache.org> > Subject: RE: ZooKeeper 3.7.1 release plan > > Hello Everyone > I am planning to make RC0 in April second week(April-03 to April 09) Also > I have few patches to contribute. I will start raising MR asap. > If anybody targeting any specific jira to go in 3.7.1 release, please try > to get it merged by March 31. > > If any suggestion on the above release timeline please reply. > > Thanks & Regards > Arshad > > > -----Original Message----- > From: Enrico Olivelli [mailto:eolive...@gmail.com] > Sent: Wednesday, March 23, 2022 12:55 PM > To: DevZooKeeper <dev@zookeeper.apache.org> > Subject: Re: ZooKeeper 3.7.1 release plan > > > Il Mer 23 Mar 2022, 05:35 Mohammad arshad <mohammad.ars...@huawei.com.invalid> > ha scritto: > > > Hello Enrico and everyone > > I would like to volunteer RM for 3.7.1 release. > > > Thank you > > Enrico > > > > > > -Arshad > > > > -----Original Message----- > > From: Enrico Olivelli [mailto:eolive...@gmail.com] > > Sent: Wednesday, March 23, 2022 1:34 AM > > To: DevZooKeeper <dev@zookeeper.apache.org> > > Subject: Re: ZooKeeper 3.7.1 release plan > > > > I am waiting for green lights on CI for the log4j patch > > > > https://github.com/apache/zookeeper/pull/1802 > > > > Then I would like to cut 3.7.1 if there aren't no other volunteers. > > > > Enrico > > > > Il Gio 24 Feb 2022, 08:56 Enrico Olivelli <eolive...@gmail.com> ha > > scritto: > > > > > Thank you Sergey, > > > we are close to releasing 3.8.0 (a new VOTE will start soon, we > > > dropped the first release candidate due to a false positive OWASP > > > report). > > > > > > Are there any volunteers for 3.7.1 ? > > > > > > Enrico > > > > > > Il giorno lun 14 feb 2022 alle ore 16:45 Сергей Иванов > > > <delta45...@gmail.com> ha scritto: > > > > > > > > Hello, > > > > > > > > There are a lot of improvements and issues in 3.7.1 (or 3.8.0, > > > > 3.6.4) fix version, including security CVE fixes (e.g. > > > > ZOOKEEPER-4337 > > > > <https://issues.apache.org/jira/browse/ZOOKEEPER-4337>) and there > > > > are no any information about release dates. Moreover, latest > > > > releases 3.7.0 and > > > > 3.6.3 were published more than 9 months ago. I haven't found any > > > > information why new versions stopped realizing, probably ZooKeeper > > > > is > > > going > > > > to be with limited support? > > > > > > > > Could you please share any release plan or any information when > > > > ZooKeeper > > > > 3.7.1 will be released? > > > > > > > > We would be glad to know any information why it can't be released > > > > and > > > help > > > > if necessary. > > > > > > > > > > > > > > > > Thank you in advance! > > > > > > > > > > > > Actually, this is the same as the ticket created > > > > https://issues.apache.org/jira/browse/ZOOKEEPER-4443 , but it > > > > doesn't > > > have > > > > any answers so I decided to try my luck here :) > > > > > > > > -- > > > > Best regards, > > > > Sergey Ivanov > > > > > >