Control: tag -1 pending Hello,
Bug #899332 in zookeeper reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below, and you can check the diff of the fix at: https://salsa.debian.org/java-team/zookeeper/commit/be4d752cddfe4371a185100ddc52b5775d46df1a ------------------------------------------------------------------------ Import Debian changes 3.4.9-3+deb8u1 zookeeper (3.4.9-3+deb8u1) jessie-security; urgency=high * Team upload. * Fix CVE-2018-8012: No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader. (Closes: #899332) zookeeper (3.4.9-3) unstable; urgency=medium * Team upload. * Apply patch for CVE-2017-5637 (Closes: #863811) "wchp" and "wchc" are now disabled by default. zookeeper (3.4.9-2) unstable; urgency=medium * Team upload. * Apply patch to set JAVA in the environment (Closes: #839184) - Thank you to Felix Dreissig. * Add patch for spelling corrections in upstream source. zookeeper (3.4.9-1) unstable; urgency=medium * Team upload. * New upstream release - Refreshed the patches - Updated debian/pom.xml * Updated the upstream signing keys zookeeper (3.4.8-2) unstable; urgency=medium * Team upload. * Add systemd unit file. (Closes: #830222) - Thanks to Felix Dreissig for the patch series. * Add dh-python to Build-Depends. (Closes: #830216) - Thanks to Felix Dreissig for the patch. * Standards-Version updated to 3.9.8 (no changes) zookeeper (3.4.8-1) unstable; urgency=medium * Team upload. * New upstream release - Refreshed the patches - Updated debian/pom.xml * Standards-Version updated to 3.9.7 (no changes) * Use secure Vcs-* URLs zookeeper (3.4.7-1) unstable; urgency=medium * Team upload. * New upstream release - Refreshed the patches - Updated debian/pom.xml * Updated the upstream signing keys zookeeper (3.4.6-8) unstable; urgency=medium * Team upload. * Fixed the netty dependency for libzookeeper-java (Closes: #797229) zookeeper (3.4.6-7) unstable; urgency=medium * Team upload. * Build-dep on liblogx4cxx-dev. See transition bug #792013. (Closes: #794418) zookeeper (3.4.6-6) unstable; urgency=medium * Team upload. * Depend on libnetty-3.9-java instead of libnetty-java zookeeper (3.4.6-5) unstable; urgency=medium * Team upload. * Fixed the packaging type of the Maven artifact (pom -> jar) * Improved the build reproducibility: - Set the locale to 'en' when generating the javadoc zookeeper (3.4.6-4) unstable; urgency=medium * Team upload. * Upload to unstable * Improved the build reproducibility: - Removed the Built-At, Built-By and Built-On entries in the manifests - Use the changelog date as the build date in Info.java zookeeper (3.4.6-3) experimental; urgency=medium * Team upload. * Fixed the Maven rule for netty to work with maven-repo-helper << 1.8.10 zookeeper (3.4.6-2) experimental; urgency=medium * Team upload. * Fixed the groupId of netty in the installed pom zookeeper (3.4.6-1) experimental; urgency=medium * Team upload. [ James Page ] * d/control: Bump epoch on default-jdk BD to exclude archictectures which don't have Java 6 or better (Closes: #742405). [ Tim Retout ] * New upstream version. (Closes: #756982) * debian/patches: Refresh patches. [ Emmanuel Bourg ] * Install the Maven artifacts (Closes: #775893) * Standards-Version updated to 3.9.6 (no changes) * Fixed some lintian warnings related to debian/copyright * libzookeeper-java suggests libzookeeper-java-doc but doesn't recommend it * Install the API documentation under /usr/share/doc/libzookeeper-java instead of usr/share/doc/libzookeeper-java-doc * debian/orig-tar.sh: - Removed src/contrib/loggraph from the upstream tarball since it isn't used and is missing the source of a minimized JavaScript file (yui-min.js) - Use XZ compression for the upstream tarball - Delete the non filtered upstream tarball after unpacking it * Added the .patch extension to the patches * Added the missing patch descriptions ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/899332
