6 Jan
2022
6 Jan
'22
5:40 p.m.
On 2022-01-06 10:31:34 -0600 (-0600), Ben Nemec wrote: [...]
I don't know if this is common, but if you use Zookeeper for DLM I assume you'd be affected. It's a supported driver in Tooz so it's possible someone would be using it.
Thanks, that's a good point! I recall when we were investigating it with regard to Zuul (which relies on ZK for state coordination and persistence), the conclusion was that it isn't impacted by the recent vulnerabilities. I found this brief explanation, but maybe that's outdated information? https://issues.apache.org/jira/browse/ZOOKEEPER-4423 -- Jeremy Stanley