-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Jun 2017 20:42:37 +0200 Source: zookeeper Binary: libzookeeper-java zookeeper zookeeperd libzookeeper-java-doc libzookeeper-mt2 libzookeeper-st2 libzookeeper2 libzookeeper-mt-dev libzookeeper-st-dev zookeeper-bin python-zookeeper Architecture: source all amd64 Version: 3.4.5+dfsg-2+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: libzookeeper-java - Core Java libraries for zookeeper libzookeeper-java-doc - API Documentation for zookeeper libzookeeper-mt-dev - Development files for multi threaded zookeeper C bindings libzookeeper-mt2 - Multi threaded C bindings for zookeeper libzookeeper-st-dev - Development files for single threaded zookeeper C bindings libzookeeper-st2 - Single threaded C bindings for zookeeper libzookeeper2 - C bindings for zookeeper - transitional package python-zookeeper - Python bindings for zookeeper zookeeper - High-performance coordination service for distributed application zookeeper-bin - Command line utilities for zookeeper zookeeperd - Init control scripts for zookeeper Changes: zookeeper (3.4.5+dfsg-2+deb7u1) wheezy-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2017-5637 by backporting version 3.4.5 from Jessie. The 3.3 branch is no longer supported upstream. It was discovered that Zookeeper, a service for maintaining configuration information, didn't restrict access to the computationally expensive wchp/wchc commands which could result in denial of service by elevated CPU consumption. This update disables those two commands by default. The new configuration option "4lw.commands.whitelist" can be used to whitelist commands selectively (and the full set of commands can be restored with '*') Checksums-Sha1: 194070c92ed9799bd79148423a20445552d66e01 3050 zookeeper_3.4.5+dfsg-2+deb7u1.dsc 7dd5853494f51ac32996e5f03e823e888b6685be 2259815 zookeeper_3.4.5+dfsg.orig.tar.bz2 4f6ce77238638ec39b8f2e84dc8a2543bf714614 43872 zookeeper_3.4.5+dfsg-2+deb7u1.debian.tar.gz 0244f8b918ddfe91cb4f2f35a99e62697bd7fa1b 1265712 libzookeeper-java_3.4.5+dfsg-2+deb7u1_all.deb 8099f7d66bb54d683d6695a788bff62640848e92 137478 zookeeper_3.4.5+dfsg-2+deb7u1_all.deb 67e80f35566e9e52b3320307b1af99e2a6038023 37414 zookeeperd_3.4.5+dfsg-2+deb7u1_all.deb 986f788caf8c7f10aadf628c4e3136198afabe2c 705066 libzookeeper-java-doc_3.4.5+dfsg-2+deb7u1_all.deb a417e7c93983ad3cf79aa7bef0c98cbe35cdbd3c 76730 libzookeeper-mt2_3.4.5+dfsg-2+deb7u1_amd64.deb 25c5e043e321e08fed1ffdaac02787c48a170f78 73842 libzookeeper-st2_3.4.5+dfsg-2+deb7u1_amd64.deb e2aa8690ca125409b5664f477ce33d0b7fdea2d3 34328 libzookeeper2_3.4.5+dfsg-2+deb7u1_amd64.deb a9dd2ef9184ed4499a28dd811cd04499a75d4b67 101492 libzookeeper-mt-dev_3.4.5+dfsg-2+deb7u1_amd64.deb bbca98a24509e5d6669d95bd9efca0d345c4e34a 97656 libzookeeper-st-dev_3.4.5+dfsg-2+deb7u1_amd64.deb 95b0e807fd9a0e6b3a21c96b4bd9a4441af98aae 93582 zookeeper-bin_3.4.5+dfsg-2+deb7u1_amd64.deb 397c0d773067d23c7739e0c49bbf43133b4f6fe4 76582 python-zookeeper_3.4.5+dfsg-2+deb7u1_amd64.deb Checksums-Sha256: b067585113d6231093c5d6449431d1191bfd4479bf956b45d29efae9fd5a3cc7 3050 zookeeper_3.4.5+dfsg-2+deb7u1.dsc a39c6789dab73bfe0aecbee130c00f7c2b7110229411766f5df04d873573a115 2259815 zookeeper_3.4.5+dfsg.orig.tar.bz2 bf8423964e23d82a6dfe1a2adcd6203f5cc415e302fc531fa936ae2ce1b6318c 43872 zookeeper_3.4.5+dfsg-2+deb7u1.debian.tar.gz cb9f701a5cedefb063f14e5852b8296636f34777f187258f3f09c90d895b73ca 1265712 libzookeeper-java_3.4.5+dfsg-2+deb7u1_all.deb 16d0d243fc6258af953771725de3f2b9a648e3f8f94488e9a6d4fe2fa608b4fc 137478 zookeeper_3.4.5+dfsg-2+deb7u1_all.deb f703538e655ea2630d7ce07fcf10d6f200fdd1d51b7c9c6c15ba6fccf2d924f9 37414 zookeeperd_3.4.5+dfsg-2+deb7u1_all.deb 39757d5560cebb7ec05f90dbe98f230dff8dbd3eaf6ea7f6a1bc860e030d9797 705066 libzookeeper-java-doc_3.4.5+dfsg-2+deb7u1_all.deb 01c049774476c0a6c1e28e85424bf5c8dad69baf555a2db5845a04ff33c342f8 76730 libzookeeper-mt2_3.4.5+dfsg-2+deb7u1_amd64.deb 23d65e205da7c4499814d6b97e0eaf486be526893552efebde34e30c1d601c9b 73842 libzookeeper-st2_3.4.5+dfsg-2+deb7u1_amd64.deb c56f788010e8aef1e3f8b65ab938080b8560b7b1ccf5a1be0e8048f5f1ea9755 34328 libzookeeper2_3.4.5+dfsg-2+deb7u1_amd64.deb d195595b2a5ef1e47f60cacff22911f6c2a385a887c3ff2d7138265134b31869 101492 libzookeeper-mt-dev_3.4.5+dfsg-2+deb7u1_amd64.deb c4ced200c944b04109c34d24a28ebd9292dc83cf2f645bec23d9aae4a9d70a5a 97656 libzookeeper-st-dev_3.4.5+dfsg-2+deb7u1_amd64.deb c73281c97fe146698e24ae300a3c9397ef9becd465ea41f15db9e5c2b5a72d9a 93582 zookeeper-bin_3.4.5+dfsg-2+deb7u1_amd64.deb 4fef62f7a20d08c3f9a062c3a5f11ca9781c5361f4ebaeb7d7eaf724a2fa55af 76582 python-zookeeper_3.4.5+dfsg-2+deb7u1_amd64.deb Files: 7ad4f9f525330c6e8908b485b91d9118 3050 java optional zookeeper_3.4.5+dfsg-2+deb7u1.dsc 3c9a8408b6bd9d8fe558d4fbb86cec94 2259815 java optional zookeeper_3.4.5+dfsg.orig.tar.bz2 87a7036d74688d98ac53c5a662e5fbfc 43872 java optional zookeeper_3.4.5+dfsg-2+deb7u1.debian.tar.gz aef0f4539bb0f032516f2f27050c0750 1265712 java optional libzookeeper-java_3.4.5+dfsg-2+deb7u1_all.deb fe9fbb052d635edddeea506ff19fa3dd 137478 java optional zookeeper_3.4.5+dfsg-2+deb7u1_all.deb 1a454da5e07ffcb2e23f96002430e63d 37414 java optional zookeeperd_3.4.5+dfsg-2+deb7u1_all.deb d94d839fd173df6e97993e36c4b3f759 705066 doc optional libzookeeper-java-doc_3.4.5+dfsg-2+deb7u1_all.deb 2a644d6e63217c750cdca542afb34186 76730 libs optional libzookeeper-mt2_3.4.5+dfsg-2+deb7u1_amd64.deb 6d568a4da667172b733e99dee0fa0c22 73842 libs optional libzookeeper-st2_3.4.5+dfsg-2+deb7u1_amd64.deb 498ac8859b761db02432447516a664af 34328 oldlibs extra libzookeeper2_3.4.5+dfsg-2+deb7u1_amd64.deb 65fbe927913982c85197c8c317015525 101492 libdevel optional libzookeeper-mt-dev_3.4.5+dfsg-2+deb7u1_amd64.deb f62d3d2f67654478659bd93aff9f4850 97656 libdevel optional libzookeeper-st-dev_3.4.5+dfsg-2+deb7u1_amd64.deb b75290e6474f70aab0b6d7965cda32a0 93582 misc optional zookeeper-bin_3.4.5+dfsg-2+deb7u1_amd64.deb bc1802763fb3b90e1254187603732090 76582 python optional python-zookeeper_3.4.5+dfsg-2+deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAllC2otfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkQyMP/jRnQFA2xaij3dqn9NgNfoZdo5OHiw8ykFBU 3qxguaMZEV4uBw89fD72EjmTpWKX6fRbgKE+MhkzAM1qAo2rnsBZ9NQK7zV4NRIs cIhCGSouflledmXmYX/Cc6BbSRaQxP0pfEIZEMkxTa1DWF9PClvyXXDj2vMzwyZF CPLL8b7heGjTdcKUssMLuL8i85xUCm2UpxRgjDHi0q15Y6mWgRsHECt05CWa8HaE oIiKGFhwr7iC5EnF6UkfBr6amrbnYVlkuazGNh9ayFOQWXH288vFWJvUZe34M+q4 3vsVxgvVkJZJQ/bbgUqRqU01ITym0knRqoDkNBSd2/nweM9qBXpfQdwWTu7IQaFF Pb7LwLhSEtkpAa8gbD2/B1tJ7ZPJh+hqitINlHOuJSIOXMNuV+WMx5owMnyHqzdJ GeepohyQwVjBnSWyocrKCPREbekDQ3uxjjB8hgVJGbpo7v9K4VzzbrO4omQvvqZT BRU0AcAIJ6RXEgZm4heCMAoZiItw3R24UEIGXavzEPn2sIeAwakiGCJifwumArMa 3zWMTp3cMrtIZIyD6tH9n1UaNS54SnLMeiG0dOkrQ5MEN46J2SmI3R/dF9oeyJ/a zOlj5o1wT1Gm3w4G7OQfCubW1bxeTGjX/mvNE1UoMSepnr7KHq+ADVbVWqx2dJR0 NlG3ilOl =gtLM -----END PGP SIGNATURE-----