End of life

Apache ZooKeeper 3.5 end of life

Apache ZooKeeper 3.5 reached end of life on 1 June 2022, with 3.5.10 as its final release. It is three lines behind the maintained releases. It remains common because 3.5 was the version bundled with many Kafka, Solr and Hadoop distributions of its era, and those ensembles were rarely revisited.

End of life
1 June 2022
Released
May 2019
Final release
3.5.10
Successor
ZooKeeper 3.8 or 3.9

Date published by Apache ZooKeeper release history, cross-checked against endoflife.date. We do not publish a lifecycle date we cannot source.

What actually stops on 1 June 2022

  • Security fixes for the 3.5 branch and its bundled dependencies
  • Any further 3.5.x releases

What actually breaks in the upgrade

3.5 usually arrived bundled, which is why nobody owns it

Ensembles on 3.5 were typically installed as part of a platform distribution rather than chosen. That means no team planned its lifecycle, and the upgrade is often blocked on the platform release that pinned it rather than on ZooKeeper itself.

Your options, costed honestly

Including the ones that do not involve buying anything from us.

OptionWhat it isEffortCostOur view
Rolling upgrade to 3.8 or 3.9One member at a time, quorum preserved.Usually stepwise through an intermediate lineEngineering timeThe destination, once every client's version tolerance is mapped.
OSSeva extended supportPatched 3.5.x builds.Drop-inPer ensembleSecures the ensemble independently of the platform release that pinned it.

What OSSeva does for Apache ZooKeeper 3.5

OSSeva patches this line

OSSeva ships patched ZooKeeper 3.5.x builds including the bundled Netty, Jetty and logging libraries.

Apache ZooKeeper extended support

What your auditor will say

PCI DSS v4 Requirement 6

Requires that system components are protected from known vulnerabilities by installing applicable security patches. A release line with no upstream patch stream cannot meet this by itself, whatever the scanner reports.

SOC 2 CC7

Vulnerability identification and remediation. Scanning satisfies identification. Remediation is what fails when the fix does not exist for the line you run.

Compliance library

Apache ZooKeeper 3.5: common questions

When did ZooKeeper 3.5 reach end of life?

1 June 2022. The final release was 3.5.10. ZooKeeper 3.6 followed on 30 December 2022 and 3.7 on 19 January 2024; only 3.8 and 3.9 remain maintained.

Still running Apache ZooKeeper 3.5?

Tell us the versions and the estate size. We will tell you honestly whether to upgrade or to buy cover — and we say 'upgrade' more often than you would expect.