From 2faa3d8079184a41b75bafefba0fe0ad234e879f Mon Sep 17 00:00:00 2001
From: Bart Hanssens <bart.hanssens@bosa.fgov.be>
Date: Fri, 28 Jun 2024 18:45:59 +0200
Subject: [PATCH] GH-5060: use more recent version of zookeeper to fix CVE

Signed-off-by: Bart Hanssens <bart.hanssens@bosa.fgov.be>
---
 core/sail/solr/pom.xml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/core/sail/solr/pom.xml b/core/sail/solr/pom.xml
index 4971068160..0db46098a5 100644
--- a/core/sail/solr/pom.xml
+++ b/core/sail/solr/pom.xml
@@ -12,8 +12,22 @@
 	<properties>
 		<!-- FIXME: Support for embedded Solr server require non-provided Java EE dependencies -->
 		<enforce-javaee-provided.fail>false</enforce-javaee-provided.fail>
+		<!-- use at least 3.7 to fix CVE -->
+		<zookeeper.version>3.7.2</zookeeper.version>
 	</properties>
 	<dependencies>
+		<!-- use at least zookeeper 3.7.2 to fix CVE, can be removed if solr provides a newer version -->
+		<dependency>
+			<groupId>org.apache.zookeeper</groupId>
+			<artifactId>zookeeper</artifactId>
+			<version>${zookeeper.version}</version>
+		</dependency>
+		<dependency>
+			<groupId>org.apache.zookeeper</groupId>
+			<artifactId>zookeeper-jute</artifactId>
+			<version>${zookeeper.version}</version>
+		</dependency>
+		<!-- -->
 		<dependency>
 			<groupId>${project.groupId}</groupId>
 			<artifactId>rdf4j-sail-lucene-api</artifactId>