Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 28D25200AE1 for ; Mon, 6 Jun 2016 22:40:32 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 277BD160A24; Mon, 6 Jun 2016 20:40:32 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 66395160A1E for ; Mon, 6 Jun 2016 22:40:31 +0200 (CEST) Received: (qmail 52147 invoked by uid 500); 6 Jun 2016 20:40:30 -0000 Mailing-List: contact user-help@zookeeper.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@zookeeper.apache.org Delivered-To: mailing list user@zookeeper.apache.org Delivered-To: moderator for user@zookeeper.apache.org Received: (qmail 46063 invoked by uid 99); 6 Jun 2016 20:38:31 -0000 X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -1.094 X-Spam-Level: X-Spam-Status: No, score=-1.094 tagged_above=-999 required=6.31 tests=[HTML_MESSAGE=2, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.426, SPF_NEUTRAL=0.652] autolearn=disabled From: "Hegde, Pallavi" To: "dev@zookeeper.apache.org" , "user@zookeeper.apache.org" Subject: Zookeeper 3.4.8 is bundled with old version of Netty:jar Thread-Topic: Zookeeper 3.4.8 is bundled with old version of Netty:jar Thread-Index: AQHRwDNbI+qN4wN+WkKuovAamCWihA== Date: Mon, 6 Jun 2016 20:38:17 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.228.141.138] Content-Type: multipart/alternative; boundary="_000_D37B2D4A38D2pallavihegdebmccom_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2016-06-06_09:,, signatures=0 X-Proofpoint-Spam-Reason: safe archived-at: Mon, 06 Jun 2016 20:40:32 -0000 --_000_D37B2D4A38D2pallavihegdebmccom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, We are currently facing some security issues with Zookeeper version 3.4.7 &= 3.4.8, since its bundled with very old version of Netty:jar, version 3.7.0= . Could you address this issue in future Zookeeper releases by packaging it w= ith Netty.jar-4.0.27, or higher version of Netty:jar? I am sure this will h= elp many other issues including security violations. Thanks Pallavi --_000_D37B2D4A38D2pallavihegdebmccom_--