-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 16 Jun 2024 10:40:07 +0000 Source: zookeeper Binary: libzookeeper-mt-dev libzookeeper-mt2 libzookeeper-mt2-dbgsym libzookeeper-st-dev libzookeeper-st2 libzookeeper-st2-dbgsym python3-zookeeper python3-zookeeper-dbgsym zookeeper-bin zookeeper-bin-dbgsym Architecture: mips64el Version: 3.8.0-11+deb12u2 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Bastien Roucariès Description: libzookeeper-mt-dev - Development files for multi threaded zookeeper C bindings libzookeeper-mt2 - Multi threaded C bindings for zookeeper libzookeeper-st-dev - Development files for single threaded zookeeper C bindings libzookeeper-st2 - Single threaded C bindings for zookeeper python3-zookeeper - Python bindings for zookeeper zookeeper-bin - Command line utilities for zookeeper Closes: 1066947 Changes: zookeeper (3.8.0-11+deb12u2) bookworm; urgency=medium . * Team upload * Bug fix: CVE-2024-23944 (Closes: #1066947): An information disclosure in persistent watchers handling was found in Apache ZooKeeper due to missing ACL check. It allows an attacker to monitor child znodes by attaching a persistent watcher (addWatch command) to a parent which the attacker has already access to. ZooKeeper server doesn't do ACL check when the persistent watcher is triggered and as a consequence, the full path of znodes that a watch event gets triggered upon is exposed to the owner of the watcher. It's important to note that only the path is exposed by this vulnerability, not the data of znode, but since znode path can contain sensitive information like user name or login ID, this issue is potentially critical. * Add salsa CI Checksums-Sha1: c0c0716d514fba7e4afea6e82b2740dfa318441f 82624 libzookeeper-mt-dev_3.8.0-11+deb12u2_mips64el.deb c87d7ba7638bd5e70e0c60dccb131267ac5c34f1 176204 libzookeeper-mt2-dbgsym_3.8.0-11+deb12u2_mips64el.deb 5014d546f8cd71eb101bf7610175fb4b31147420 46320 libzookeeper-mt2_3.8.0-11+deb12u2_mips64el.deb 9399d89796d80cf1413dbef8caee7731ba4c78fb 76868 libzookeeper-st-dev_3.8.0-11+deb12u2_mips64el.deb f2ee8309b0150a2a4216990155a37a7c732d38f5 159844 libzookeeper-st2-dbgsym_3.8.0-11+deb12u2_mips64el.deb 6e66a1dbdc7b36f5267df220924ebff842380677 42032 libzookeeper-st2_3.8.0-11+deb12u2_mips64el.deb 0b421d41c994ec9b00e0a49984e2fd2b10dda3af 40856 python3-zookeeper-dbgsym_3.8.0-11+deb12u2_mips64el.deb 01fc0fa1c5baa69bdc3236ea821c495b0b8faacf 22084 python3-zookeeper_3.8.0-11+deb12u2_mips64el.deb dac4acab8ab5032cf21847298b4edace5e9a737f 36020 zookeeper-bin-dbgsym_3.8.0-11+deb12u2_mips64el.deb e34cf29d6d76100fcc683799c62c5454cf24c690 20456 zookeeper-bin_3.8.0-11+deb12u2_mips64el.deb f797f62bf579c39e538f0e6b80d643376fccab9e 23215 zookeeper_3.8.0-11+deb12u2_mips64el-buildd.buildinfo Checksums-Sha256: 472b45cc38ff9eac650f6947a43bcb8cb4c57e1b2eb32aab1f47ef37ea36e08e 82624 libzookeeper-mt-dev_3.8.0-11+deb12u2_mips64el.deb 72106c58f0de6a10b1fa357a7bfd16c17ad16896fa8d8b96b82ed0d89c2c31e8 176204 libzookeeper-mt2-dbgsym_3.8.0-11+deb12u2_mips64el.deb ea84ce0663755f47acdf9798fa78253bd17fe3fb76ca22d7378bd0d347800d93 46320 libzookeeper-mt2_3.8.0-11+deb12u2_mips64el.deb c5597aac1e609ae08aa319b9bb72a6f40d97048f1066deb7f7397ba2f17954c4 76868 libzookeeper-st-dev_3.8.0-11+deb12u2_mips64el.deb d48a9b8c98eb2027d88a944ef61747e07b3ec2d40340dee900a6a2f8d31fe957 159844 libzookeeper-st2-dbgsym_3.8.0-11+deb12u2_mips64el.deb 53a43b6bbe78960c464db14977d123d01de8240478c17b5846a43345a2fe961c 42032 libzookeeper-st2_3.8.0-11+deb12u2_mips64el.deb 8eb596458bba6a1cf894542c13a568d3c6199b35b60d0c71c9483ef4d5d6c4e7 40856 python3-zookeeper-dbgsym_3.8.0-11+deb12u2_mips64el.deb bca149d11b1be8ead996441f2dd2c1897cb1105c99354eecd902d539198a6bb0 22084 python3-zookeeper_3.8.0-11+deb12u2_mips64el.deb 8b731dcb007f4472c6df1ac7fb7862870e0e3204d53f96b9a734853b5e1361ce 36020 zookeeper-bin-dbgsym_3.8.0-11+deb12u2_mips64el.deb 1902a3e9e6d986d0ca74f3f64543c91887b397699c82df9311f9da7b5d245549 20456 zookeeper-bin_3.8.0-11+deb12u2_mips64el.deb 2d21098e7482ef0e6db5c40df2c5932d983dc1394565e409cffdbc3deae86217 23215 zookeeper_3.8.0-11+deb12u2_mips64el-buildd.buildinfo Files: a5f2aedc872cba612e6d46d56e3b886f 82624 libdevel optional libzookeeper-mt-dev_3.8.0-11+deb12u2_mips64el.deb 05e2a248f766e9ad92d4d2a27bf11e70 176204 debug optional libzookeeper-mt2-dbgsym_3.8.0-11+deb12u2_mips64el.deb d380f91f6fbf2fcebcd9c82d186bfad0 46320 libs optional libzookeeper-mt2_3.8.0-11+deb12u2_mips64el.deb dee2f2cb194758669a50d0791033ace0 76868 libdevel optional libzookeeper-st-dev_3.8.0-11+deb12u2_mips64el.deb c868c3715dcd71f9b0bfb950f6a01ba4 159844 debug optional libzookeeper-st2-dbgsym_3.8.0-11+deb12u2_mips64el.deb 530701cae7502f7a6f852cda1b57adc5 42032 libs optional libzookeeper-st2_3.8.0-11+deb12u2_mips64el.deb decf1e44dd5d91df72da0470a1d08f65 40856 debug optional python3-zookeeper-dbgsym_3.8.0-11+deb12u2_mips64el.deb 1b9c3e3eaec0c995838c670946c24d9b 22084 python optional python3-zookeeper_3.8.0-11+deb12u2_mips64el.deb 2b94318c264162c46566ce0351520389 36020 debug optional zookeeper-bin-dbgsym_3.8.0-11+deb12u2_mips64el.deb e8046f84eb26b69258d058aca3da0135 20456 misc optional zookeeper-bin_3.8.0-11+deb12u2_mips64el.deb 272bfcdb1e73bbcd0f741474602f6257 23215 java optional zookeeper_3.8.0-11+deb12u2_mips64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEunmvxaaGKuI+hxxClmZGXOM83t8FAmdxywUACgkQlmZGXOM8 3t92PQ/+IEA9516QZLavmqr7v4PdkWUoBWz8uzhI1OHP47Sraw46oZJgVELMvXMq rpAzsX7/SWiyGfl+UALjjKruodxvHRzWBBDWBmADdp6Dx2LTJqNoj6pQi0Crb7hz 6oANwwWPmhBNzE4ulQrVEwttQ9cpYJUvUKg5x9Dl7Fjr+1mBnF1wMhwVwn7gIT2F NikjmeKpddIhtv7m0mGzy//LtLvncC41sGHd2+xdwVdI+tL/VOY7fnLyADH4CS8K Xq9fPdGuwSULkAXRnzyyGK6p2glLDsw0KFetu72L8EoaqqDeFxkYhK4dwUhG9y9N mLC0smiuhCT+oxt3pZDjd80hq3WewgTXoWHpDpK9tTwE9iteVGa0gyFC64n3fwW4 ZnqzS1eO0DxK0VbWhE+NMk2ZlAXbn+9LqEAXt+bpy3Ywka3EXS/Vws6VVMuqDBgr IrFJpA7wdEzdZ6iLqHllPQsbNVwYbkE6nbcMmdr3wHNVXC9ajecoFIEEHCw/nOen 4RtI81Y64/+JQy+tG5XI0wpzsCkK5/3ffBkStvxEvOvXwGl4F4U+m2nRywBW5hZS oQW6whulfsn76TPRu33byOmF5RtsjPbM44hxgRVKO37DZjLMOLI/ljWBEE73tpSb SldOvfuyZ833RSRZGwXpZZPFuMP3qWjMMx299kbDRtBOpYeo5oE= =OyCl -----END PGP SIGNATURE-----