From 84c59dac096ddba5e83e8e20810eafa19dd0256f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Edgar=20Hern=C3=A1ndez?=
 <23639005+israel-hdez@users.noreply.github.com>
Date: Wed, 20 Mar 2024 13:45:21 -0600
Subject: [PATCH] chore: Update zookeeper to 3.8.4
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This is to move away from CVE-2024-23944: information disclosure.

Signed-off-by: Edgar Hernández <23639005+israel-hdez@users.noreply.github.com>
---
 pom.xml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index c2c50f956..20a6c2b7f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -70,14 +70,14 @@
     <thrift-version>0.19.0</thrift-version>
     <eclipse-collections-version>11.1.0</eclipse-collections-version>
     <log4j2-version>2.21.1</log4j2-version>
-    <slf4j-version>1.7.36</slf4j-version>
+    <slf4j-version>2.0.12</slf4j-version>
     <!-- Care must be taken when updating the prometheus client lib version
          since we have some custom optimized extensions to this -->
     <prometheus-version>0.9.0</prometheus-version>
     <bouncycastle-version>1.74</bouncycastle-version>
     <junit-version>5.10.1</junit-version>
 
-    <zookeeper-version>3.7.2</zookeeper-version>
+    <zookeeper-version>3.8.4</zookeeper-version>
     <curator-version>5.3.0</curator-version>
 
     <dockerhome>${project.build.directory}/dockerhome</dockerhome>
@@ -532,6 +532,12 @@
         <groupId>org.apache.zookeeper</groupId>
         <artifactId>zookeeper</artifactId>
         <version>${zookeeper-version}</version>
+        <exclusions>
+          <exclusion>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-classic</artifactId>
+          </exclusion>
+        </exclusions>
       </dependency>
       <dependency>
         <groupId>org.apache.curator</groupId>