Skip to content
master
Switch branches/tags
Code

Latest commit

The issue reported in CVE-2021-29425 is fixed in release 2.7:

-   <https://nvd.nist.gov/vuln/detail/CVE-2021-29425>
-   <https://issues.apache.org/jira/browse/IO-556>
-   <https://issues.apache.org/jira/browse/IO-559>
-   <https://commons.apache.org/proper/commons-io/changes-report.html#a2.7>

This changeset bumps the dependency to 2.11, as there are no obvious breaking changes.

Author: Damien Diederen <ddiederen@apache.org>

Reviewers: Norbert Kalmar <nkalmar@apache.org>, Enrico Olivelli <eolivelli@apache.org>

Closes #1735 from ztzg/ZOOKEEPER-4343-owasp-failures and squashes the following commits:

4fd39da [Damien Diederen] ZOOKEEPER-4337: Bump commons-io to 2.11 (latest)
8a76929 [Damien Diederen] ZOOKEEPER-4337: Bump commons-io to 2.7 (avoids CVE-2021-29425)
7728100 [Damien Diederen] ZOOKEEPER-4337: Pull commons-io dependency in toplevel POM (minor cleanup)
726ec30

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time

Apache ZooKeeper GitHub Actions CI Travis CI Maven Central License

alt text

For the latest information about Apache ZooKeeper, please visit our website at:

https://zookeeper.apache.org

and our wiki, at:

https://cwiki.apache.org/confluence/display/ZOOKEEPER

Packaging/release artifacts

Either downloaded from https://zookeeper.apache.org/releases.html or found in zookeeper-assembly/target directory after building the project with maven.

apache-zookeeper-[version].tar.gz

    Contains all the source files which can be built by running:
    mvn clean install

    To generate an aggregated apidocs for zookeeper-server and zookeeper-jute:
    mvn javadoc:aggregate
    (generated files will be at target/site/apidocs)

apache-zookeeper-[version]-bin.tar.gz

    Contains all the jar files required to run ZooKeeper
    Full documentation can also be found in the docs folder

As of version 3.5.5, the parent, zookeeper and zookeeper-jute artifacts are deployed to the central repository after the release is voted on and approved by the Apache ZooKeeper PMC:

https://repo1.maven.org/maven2/org/apache/zookeeper/zookeeper

Java 8

If you are going to compile with Java 1.8, you should use a recent release at u211 or above.

Contributing

We always welcome new contributors to the project! See How to Contribute for details on how to submit patch through pull request and our contribution workflow.