This is an automated email from the ASF dual-hosted git repository. lhotari pushed a commit to branch branch-2.10 in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/branch-2.10 by this push: new e3bbedf3279 [fix][sec] Upgrade Zookeeper to 3.9.2 to address CVE-2024-23944 (#22275) e3bbedf3279 is described below commit e3bbedf32797ec1ad8294face61d9a0eeffa6cba Author: Lari Hotari <lhot...@users.noreply.github.com> AuthorDate: Fri Mar 15 07:41:13 2024 -0700 [fix][sec] Upgrade Zookeeper to 3.9.2 to address CVE-2024-23944 (#22275) (cherry picked from commit 2ffcf62f628c6f41e78eeb2dd64999d558b6f617) --- distribution/server/src/assemble/LICENSE.bin.txt | 6 +++--- pom.xml | 2 +- pulsar-sql/presto-distribution/LICENSE | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt index e10bc19bb66..75c25e31998 100644 --- a/distribution/server/src/assemble/LICENSE.bin.txt +++ b/distribution/server/src/assemble/LICENSE.bin.txt @@ -525,9 +525,9 @@ The Apache Software License, Version 2.0 - io.vertx-vertx-web-3.9.8.jar - io.vertx-vertx-web-common-3.9.8.jar * Apache ZooKeeper - - org.apache.zookeeper-zookeeper-3.9.1.jar - - org.apache.zookeeper-zookeeper-jute-3.9.1.jar - - org.apache.zookeeper-zookeeper-prometheus-metrics-3.9.1.jar + - org.apache.zookeeper-zookeeper-3.9.2.jar + - org.apache.zookeeper-zookeeper-jute-3.9.2.jar + - org.apache.zookeeper-zookeeper-prometheus-metrics-3.9.2.jar * Snappy Java - org.xerial.snappy-snappy-java-1.1.10.5.jar * Google HTTP Client diff --git a/pom.xml b/pom.xml index 65f11ba8776..beb3461358e 100644 --- a/pom.xml +++ b/pom.xml @@ -105,7 +105,7 @@ flexible messaging model and an intuitive client API.</description> <commons-compress.version>1.26.0</commons-compress.version> <bookkeeper.version>4.14.8</bookkeeper.version> - <zookeeper.version>3.9.1</zookeeper.version> + <zookeeper.version>3.9.2</zookeeper.version> <commons-cli.version>1.5.0</commons-cli.version> <snappy.version>1.1.10.5</snappy.version> <!-- ZooKeeper server --> <dropwizardmetrics.version>3.2.5</dropwizardmetrics.version> <!-- ZooKeeper server --> diff --git a/pulsar-sql/presto-distribution/LICENSE b/pulsar-sql/presto-distribution/LICENSE index f8d79f6b013..76955a58fa6 100644 --- a/pulsar-sql/presto-distribution/LICENSE +++ b/pulsar-sql/presto-distribution/LICENSE @@ -470,8 +470,8 @@ The Apache Software License, Version 2.0 - memory-0.8.3.jar - sketches-core-0.8.3.jar * Apache Zookeeper - - zookeeper-3.9.1.jar - - zookeeper-jute-3.9.1.jar + - zookeeper-3.9.2.jar + - zookeeper-jute-3.9.2.jar * Apache Yetus Audience Annotations - audience-annotations-0.12.0.jar * Swagger