-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 16 Jun 2024 10:40:07 +0000 Source: zookeeper Binary: libzookeeper-mt-dev libzookeeper-mt2 libzookeeper-mt2-dbgsym libzookeeper-st-dev libzookeeper-st2 libzookeeper-st2-dbgsym python3-zookeeper python3-zookeeper-dbgsym zookeeper-bin zookeeper-bin-dbgsym Architecture: s390x Version: 3.8.0-11+deb12u2 Distribution: bookworm Urgency: medium Maintainer: s390x Build Daemon (zandonai) Changed-By: Bastien Roucariès Description: libzookeeper-mt-dev - Development files for multi threaded zookeeper C bindings libzookeeper-mt2 - Multi threaded C bindings for zookeeper libzookeeper-st-dev - Development files for single threaded zookeeper C bindings libzookeeper-st2 - Single threaded C bindings for zookeeper python3-zookeeper - Python bindings for zookeeper zookeeper-bin - Command line utilities for zookeeper Closes: 1066947 Changes: zookeeper (3.8.0-11+deb12u2) bookworm; urgency=medium . * Team upload * Bug fix: CVE-2024-23944 (Closes: #1066947): An information disclosure in persistent watchers handling was found in Apache ZooKeeper due to missing ACL check. It allows an attacker to monitor child znodes by attaching a persistent watcher (addWatch command) to a parent which the attacker has already access to. ZooKeeper server doesn't do ACL check when the persistent watcher is triggered and as a consequence, the full path of znodes that a watch event gets triggered upon is exposed to the owner of the watcher. It's important to note that only the path is exposed by this vulnerability, not the data of znode, but since znode path can contain sensitive information like user name or login ID, this issue is potentially critical. * Add salsa CI Checksums-Sha1: 01a2dfea1df5f76c131171afe662b9bc9fc2dca2 74160 libzookeeper-mt-dev_3.8.0-11+deb12u2_s390x.deb f83f806001ea3c414b767d81068ecaf005b1e0dd 162008 libzookeeper-mt2-dbgsym_3.8.0-11+deb12u2_s390x.deb 29c406899421b9baa9962537ec01f35e513f1a61 47804 libzookeeper-mt2_3.8.0-11+deb12u2_s390x.deb 10f8f77d12a1bd68707e70422bdd427385392ca9 69860 libzookeeper-st-dev_3.8.0-11+deb12u2_s390x.deb 9c3128ea0ff1bded138d576826c0f9105c819c86 147340 libzookeeper-st2-dbgsym_3.8.0-11+deb12u2_s390x.deb 1511107c4d12083c4ef90fcded4b58cabfeb3003 43484 libzookeeper-st2_3.8.0-11+deb12u2_s390x.deb f8a82e6ad42747e792407b63bf95b90556fc1f99 37440 python3-zookeeper-dbgsym_3.8.0-11+deb12u2_s390x.deb 8f9ef7776ab0f29d0c9925374d9cbd4c82572d94 23420 python3-zookeeper_3.8.0-11+deb12u2_s390x.deb 2582de776154b6a601829e67e8ef52de8621938e 33984 zookeeper-bin-dbgsym_3.8.0-11+deb12u2_s390x.deb da9645d7c6a471629480a410a744989abb503b14 19532 zookeeper-bin_3.8.0-11+deb12u2_s390x.deb 514699daa6194ccacd0fa08ff4b5deb093187a25 23160 zookeeper_3.8.0-11+deb12u2_s390x-buildd.buildinfo Checksums-Sha256: dc090ce83fe7cdc3e0e0b9ab3d0c6c921a75255cc97ecbeef45abb4db55e5591 74160 libzookeeper-mt-dev_3.8.0-11+deb12u2_s390x.deb 7784f37213f522068989c661831d7b94733cc5a8ba4b00873ff4ef310556eaa6 162008 libzookeeper-mt2-dbgsym_3.8.0-11+deb12u2_s390x.deb 190ed335664919b7605d5f805d700efb1bbe5b6c886f88d582955d62738937e2 47804 libzookeeper-mt2_3.8.0-11+deb12u2_s390x.deb d3851b83da6231a436c1d9d8d5b6db42707889fcbf3a13bad50af310065f03a0 69860 libzookeeper-st-dev_3.8.0-11+deb12u2_s390x.deb 752336b22dafafaf08155c5ed56065c91d21bd45b1a254e44eb00966e03fa4de 147340 libzookeeper-st2-dbgsym_3.8.0-11+deb12u2_s390x.deb d3e655ddb0c5d70d83f4676b2aebbd3106dab10995371db8c3160279b40d62ce 43484 libzookeeper-st2_3.8.0-11+deb12u2_s390x.deb b5b786f18e8ed4136569505629d4d570fa3ef121d7ad046951a0bc1b99bdb8e5 37440 python3-zookeeper-dbgsym_3.8.0-11+deb12u2_s390x.deb 995201977b35c809f5490ff1b77755431c80ee9b6f349f4adacfaeb838b5f630 23420 python3-zookeeper_3.8.0-11+deb12u2_s390x.deb 29effec29f4d5d19a48bfd7f8e0759344bc2154bc399f6879cee96acaa713963 33984 zookeeper-bin-dbgsym_3.8.0-11+deb12u2_s390x.deb d532219210c34a1830f37db6347395a69c38db319e1536dbab812c67821ad3fc 19532 zookeeper-bin_3.8.0-11+deb12u2_s390x.deb 9fac544bc4cd658e7671300de85b54ba50fec221162b131aade511f11356c93e 23160 zookeeper_3.8.0-11+deb12u2_s390x-buildd.buildinfo Files: 80bf4940b72c5138325a678cf1dcb161 74160 libdevel optional libzookeeper-mt-dev_3.8.0-11+deb12u2_s390x.deb b6e7152cdf97cb6b175455ecc91372ed 162008 debug optional libzookeeper-mt2-dbgsym_3.8.0-11+deb12u2_s390x.deb 148b78a1ecd1f371dc35d76573d588b4 47804 libs optional libzookeeper-mt2_3.8.0-11+deb12u2_s390x.deb 3fd4bc366dc3c4af5d6438ca81051b33 69860 libdevel optional libzookeeper-st-dev_3.8.0-11+deb12u2_s390x.deb af5e2da8184e770210a18475ad9a2cb7 147340 debug optional libzookeeper-st2-dbgsym_3.8.0-11+deb12u2_s390x.deb ce31a9dbc7a5f74d914a055eab073ae8 43484 libs optional libzookeeper-st2_3.8.0-11+deb12u2_s390x.deb 9c4780ce51b28db42369375671d32c72 37440 debug optional python3-zookeeper-dbgsym_3.8.0-11+deb12u2_s390x.deb 3ef03d6b4195e4a6b38475783d867f3c 23420 python optional python3-zookeeper_3.8.0-11+deb12u2_s390x.deb 1e16bcfa08c6cb0eb4a6e0b77a8e0fdd 33984 debug optional zookeeper-bin-dbgsym_3.8.0-11+deb12u2_s390x.deb 6d11d355371c2ccff8eb2f16bc4c4c33 19532 misc optional zookeeper-bin_3.8.0-11+deb12u2_s390x.deb 17472b055177b530753d49cd0df851f9 23160 java optional zookeeper_3.8.0-11+deb12u2_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEu0D/YpnnSxv8epH9AKOyQzsWVasFAmdxjVUACgkQAKOyQzsW Vat71xAAitkHCPjwUeIkzoyVtWocEugcyszGtlt8unj0nCC+5SjfyMreKdzTUQaT BxZUng7RubDKqy0lXbhEkeJG4q2/5polYbJVJy5Z/VbW7owvq1661ikXorXXDO3I 1xppYOplCECely6ojwUBoWynCGzEqALU5fPqucloS4LjXY4hv3gVyNg1orGB3F1p 7tzpvwFgB7hLF4VFsR3B5YUa7+kMZI0xZQktVLI+kPMJcWwG1qALXGMDgpbNQfgS kMzIds2AVmAVKQNpqgsgBSo05uNc5Z972B/J7slaVN6iEP7MRoOzCoNAF223qtpI RBIgduNwiZV3MI0dJ/XAWAeU4mWMa3lI6bVQoxrxHUqCvGG417CzJ7pyoMaViWta wfIUg2QacZ9bqvOTt/gKWXMKIWz2As3abWp8WKSDW4E9E3Cg5JtQjZYIS3eiTgo3 v0o08XoYzHFF3vSw3bZrtrcaN4sHdQWm6lRPlvLi6xiyJG8xrULdZlLvKFID3bXx /csMb5WYj5X9CRjKoDlfM5XcheHUFS7K5csJCguaMvkFWsBA94M/CTJtq6fgGD4w TUPsQN1/b29BqHwka2kH5z1t1C1gMsoEUw6Y7afUO87C7rXIBPwmhtHzVislCv3X r3Y+Rc/oMHq4JwcLfoj/kDI/LQWCg3IMjn+igTl1O+yRsai72hg= =H8gE -----END PGP SIGNATURE-----