[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-4602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17599519#comment-17599519
 ] 

Enrico Olivelli commented on ZOOKEEPER-4602:
--------------------------------------------

I have committed the patch to branch-3.6.

Please send the PR against all the other active branches (branch-3.7, 
branch-3.8 and master)

> Upgrade reload4j due to XXE vulnerability
> -----------------------------------------
>
>                 Key: ZOOKEEPER-4602
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4602
>             Project: ZooKeeper
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 3.5.9
>            Reporter: Ananya Singh
>            Assignee: Ananya Singh
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 3.6.4, 3.9.0, 3.8.1, 3.7.2
>
>          Time Spent: 1h
>  Remaining Estimate: 0h
>
> [https://github.com/qos-ch/reload4j/issues/53] fixed in reload4j 1.2.22



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to