Release Release 4.14.8 · apache/bookkeeper

Release 4.14.8 includes multiple bug fixes and some dependencies CVE fixes.

Apache BookKeeper users are encouraged to upgrade to 4.14.8.
The technical details of this release are summarized below.

Fix data lost when configured multiple ledger directories PR #3329
Allow to set max operation numbers in a single rocksdb batch PR #4044
Recycle LongWrapper finally to avoid memory leak PR #4007
Fix arbitrary file upload vulnerability with httpServerEnabled PR #3982
Clear channel when channelInactive PR #3966
Fix npe when iterate pendingLedgersUpdates and pendingDeletedLedgers. PR #3955
Fix some metrics generated by prometheus client without type info PR #3927
Fix ledger replicated failed blocks bookie decommission process PR #3917
Recycle dropping read-write requests when various exceptions happened PR #3912
Fix SingleDirectoryDbLedgerStorage#flushMutex does not release lock on all exception paths PR #3909
Fix ReclaimedSpaceViaDeletes stats incorrect problem. PR #3906
Fix keys leak in EntryLocationIndex when ledgersToDelete is empty PR #3903
Fix garbage collection blocked by runtime exception PR #3901
Return activeLogChannel if new create PR #3894
Prevent transit to writable mode when forceReadOnly mode is active PR #3881
Execute clean indexes in finally PR #3772
Fix ReadEntryProcessor v2 SchedulingDelayStats PR #3758
Fix RegionAwareEnsemblePlacementPolicy.newEnsemble sometimes failed problem. PR #3725
Fix issue where checkAllLedgers could get stuck when read throttling is enabled PR #3655
fix duplicate typeline for prometheus type PR #3137
Fix deletedLedgers count PR #4026

Avoid compaction to trigger extra flushes DbLedgerStorage PR #3959
Add small files check in garbage collection PR #3631
Change pendingDeletedLedgers as ConcurrentHashSet PR #3989
Support skip invalid journal record in replying journal stage PR #3956
Use ReferenceCountUtil.release() instead of ReferenceCountUtil.safeRelease() PR #3798
Add logs for ensemble select failed PR #3779
New ensemble choose different rack first. PR #3721
Show result of isFenced in log PR #3678

Upgrade rocksDB version to 6.29.4.1 PR #3947
Upgrade jetty version to 9.4.51.v20230217 PR #3937
Upgrade docker base image to resolve CVE-2023-0286 PR #3916
Remove avro, hadoop-auth and jersey-json dependencies from hadoop-common to resolve CVE-2019-10202, CVE-2023-1370 and CVE-2022-45685 PR #3911

Provide feedback