You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@storm.apache.org by Richard Zowalla <rz...@apache.org> on 2022/02/08 10:04:43 UTC

Release?

Hi all,

I would like to ask kindly if we can get a 2.4.0 version soon?

It contains a zookeeper upgrade, which is required to fix an issue in
java 17 environments. Also it contains an upgraded log4j2 version,
which mitigates log4shell cve - I think it would be appreciated by the
community to have a new release soon.

There are some interesting open PRs too:

- https://github.com/apache/storm/pull/3438 (CVE-2020-25649)
- https://github.com/apache/storm/pull/3439 (several CVEs)
- https://github.com/apache/storm/pull/3437 (fixes CI/CD)

which would be also very nice to have in a 2.4.0 release, which brings
us forward in supporting J17 runtime envs.

Gruß and Thx
Richard