Lintian reports
4 errors
and
14 warnings
about this package. You should make the package lintian clean getting rid of them.
debian/patches: 12 patches to forward upstream
low
Among the 18 debian patches
available in version 3.5.16-3 of the package,
we noticed the following issues:
12 patches
where the metadata indicates that the patch has not yet been forwarded
upstream. You should either forward the patch upstream or update the
metadata to document its real status.
CVE-2021-28235:
Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.
CVE-2023-32082:
etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.26 and 3.5.9, the LeaseTimeToLive API allows access to key names (not value) associated to a lease when `Keys` parameter is true, even a user doesn't have read permission to the keys. The impact is limited to a cluster which enables auth (RBAC). Versions 3.4.26 and 3.5.9 fix this issue. There are no known workarounds.
Standards version of the package is outdated.
wishlist
The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.7.0 instead of
4.6.2).
![[bug history graph]](https://qa.debian.org/data/bts/graphs/e/etcd.png){kind=link}