Apache ZooKeeper 3.6 end of life
Apache ZooKeeper 3.6 reached end of life on 30 December 2022, with 3.6.4 as its final release. It receives no security fixes, and at two lines behind the maintained releases it is among the oldest components still holding quorum in many production estates.
What now
Which vendors provide Apache ZooKeeper 3.6 security patches now that support has ended?
ZooKeeper EOL: Extended Support for 3.4 to 3.7 (Embedded)- End of life
- 30 December 2022
- Released
- Feb 2020
- Final release
- 3.6.4
- Successor
- ZooKeeper 3.8 or 3.9
Date published by Apache ZooKeeper release history, cross-checked against endoflife.date. We do not publish a lifecycle date we cannot source. Dates checked on zookeeper.apache.org and endoflife.date on 20 October 2026.
Last reviewed
Apache ZooKeeper versions: release and end-of-life dates
| Version | Released | End of life | Status |
|---|---|---|---|
| Apache ZooKeeper 3.7 | 17 Mar 2021 | 2 February 2024 | End of life |
| Apache ZooKeeper 3.6 (this page) | 25 Feb 2020 | 30 December 2022 | End of life |
| Apache ZooKeeper 3.5 | 3 May 2019 | 1 June 2022 | End of life |
| Apache ZooKeeper 3.4 | 22 Nov 2011 | 1 June 2020 | End of life |
End-of-life dates are published by each project and checked against endoflife.date.
What actually stops on 30 December 2022
- Security fixes for the 3.6 branch and its bundled dependencies
- Any further 3.6.x releases
What actually breaks in the upgrade
Check what still points at it
An ensemble this old usually predates at least one of the systems registering with it. Enumerate every client before planning the move — the list is reliably longer than the team expects, and the forgotten entry is what breaks.
Your options, costed honestly
Including the ones that do not involve buying anything from us.
| Option | What it is | Effort | Cost | Our view |
|---|---|---|---|---|
| Rolling upgrade to 3.8 or 3.9 | One member at a time, quorum preserved. | Coordinated with every client | Engineering time | The destination. |
| OSSeva extended support | Patched 3.6.x builds. | Drop-in | Per ensemble | Secures the ensemble while the client inventory is worked through. |
What OSSeva does for Apache ZooKeeper 3.6
OSSeva patches this line
OSSeva ships patched ZooKeeper 3.6.x builds including the bundled dependency set.
Apache ZooKeeper extended support
Apache ZooKeeper extended support What your auditor will say
An ensemble holds the configuration and access-control state for the systems it coordinates, which places it in scope alongside them. Write access to ZooKeeper is effectively administrative access to the cluster above it.
Logical access control. Unrestricted four-letter-word commands and permissive ACLs on an ensemble are a recurring finding, and they are easy to demonstrate to an assessor.
When did ZooKeeper 3.6 reach end of life?
30 December 2022. The final release was 3.6.4.
Get a quote
Still running Apache ZooKeeper 3.6?
Tell us the versions and the estate size. We will tell you honestly whether to upgrade or to buy cover — and we say 'upgrade' more often than you would expect.
Prefer to talk or read more first?