https://bugzilla.redhat.com/show_bug.cgi?id=1454808
--- Comment #7 from Christopher Tubbs <ctubbsii(a)fedoraproject.org> ---
I agree. ZooKeeper isn't designed to be run as a publicly available service.
It's designed to be a coordination system for distributed applications deployed
within a well-designed cluster architecture.
If the input validation is buggy, that's certainly something to be addressed...
but I'm not sure I'd call it a "security" bug, when the real security
bug is
the user operating it in an environment it wasn't designed for.
That said, ZooKeeper is *very* stable in its API, from what I've seen, and it's
generally *very* low risk to upgrade to the latest version to fix any known
bugs, provided the dependencies are available.
--
You are receiving this mail because:
You are on the CC list for the bug.