[From nobody Sun Sep 20 06:35:08 2026 Received: (at submit) by bugs.debian.org; 19 Sep 2026 14:44:43 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-10.0 required=4.0 tests=BAYES_00,FROMDEVELOPER, NO_RELAYS,XMAILER_REPORTBUG autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 47; hammy, 150; neutral, 167; spammy, 0. spammytokens: hammytokens:0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc, 0.000-+--H*F:U*carnil, 0.000-+--H*Ad:N*Bug, 0.000-+--HTo:N*Debian Return-path: <carnil@debian.org> Received: via submission by buxtehude.debian.org with esmtp (Exim 4.96) (envelope-from <carnil@debian.org>) id 1x7wJ1-0058k2-0B for submit@bugs.debian.org; Sat, 19 Sep 2026 14:44:43 +0000 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Salvatore Bonaccorso <carnil@debian.org> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: zookeeper: CVE-2026-79993 CVE-2026-84439 CVE-2026-84501 Message-ID: <178982908198.422128.12622803669341139183.reportbug@eldamar.lan> X-Mailer: reportbug 13.2.0+nmu1 Date: Sat, 19 Sep 2026 16:44:41 +0200 Delivered-To: submit@bugs.debian.org U291cmNlOiB6b29rZWVwZXIKVmVyc2lvbjogMy45LjUtMgpTZXZlcml0eTogaW1wb3J0YW50ClRh Z3M6IHNlY3VyaXR5IHVwc3RyZWFtClgtRGViYnVncy1DYzogY2FybmlsQGRlYmlhbi5vcmcsIERl YmlhbiBTZWN1cml0eSBUZWFtIDx0ZWFtQHNlY3VyaXR5LmRlYmlhbi5vcmc+CgpIaSwKClRoZSBm b2xsb3dpbmcgdnVsbmVyYWJpbGl0aWVzIHdlcmUgcHVibGlzaGVkIGZvciB6b29rZWVwZXIuCgpD VkUtMjAyNi03OTk5M1swXToKfCBUaGUgYGRlbGV0ZUNvbnRhaW5lcmAgb3Bjb2RlICgweDE0LzIw KSBpcyBwcm9jZXNzZWQgd2l0aG91dAp8IHZlcmlmeWluZyB0aGUgY2FsbGVyJ3MgQUNMIHBlcm1p c3Npb25zLCBhbGxvd2luZyBhbnkgYXV0aGVudGljYXRlZAp8IGNsaWVudCB0byBkZWxldGUgc3Bl Y2lmaWMgem5vZGVzIGluIHRoZSBkYXRhIHRyZWUgcmVnYXJkbGVzcyBvZiB0aGUKfCBBQ0wgcmVz dHJpY3Rpb25zIG9uIHRoZSB6bm9kZSBvciBpdHMgcGFyZW50LiBUaGlzIG9wY29kZSBpcwp8IGNv bnNpZGVyZWQgaW50ZXJuYWwtb25seSBhbmQgdGhlIG9mZmljaWFsIGNsaWVudCBkb2Vzbid0IGhh dmUgQVBJCnwgZm9yIGl0LCBidXQgYcKgY2xpZW50IHRoYXQgY2FuIG9wZW4gYSBwbGFpbiBUQ1Ag c2Vzc2lvbiBvbiB0aGUKfCBab29LZWVwZXIgY2xpZW50IHBvcnQgKDIxODEgYnkgZGVmYXVsdCnC oC0gd2l0aCBOTyBhdXRoZW50aWNhdGlvbiBhbmQKfCBOTyBBQ0wgcGVybWlzc2lvbnMgLSBjYW4g ZGVsZXRlIGFuecKgZW1wdHkgcGVyc2lzdGVudCB6bm9kZQp8IChpbmNsdWRpbmcgcmVndWxhciBw ZXJzaXN0ZW50IG5vZGVzLCBjb250YWluZXLCoG5vZGVzLCBhbmQgVFRMIG5vZGVzKQp8IGJ5IGlz c3VpbmcgdGhlIHJhdyBwcm90b2NvbCBPcENvZGUgZGVsZXRlQ29udGFpbmVyICgyMCkuwqBUaGUK fCBkZWxldGVDb250YWluZXIgcmVxdWVzdCBwYXRoIGNvbXBsZXRlbHkgc2tpcHMgYm90aCB0aGUg c2Vzc2lvbiBjaGVjawp8IGFuZMKgdGhlIERFTEVURSBBQ0wgY2hlY2sgdGhhdCBhcmUgZW5mb3Jj ZWQgYnkgdGhlIHJlZ3VsYXIgZGVsZXRlCnwgKE9wQ29kZSAyKSBwYXRoLsKgVGhpcyBpcyBhbiBh dXRob3JpemF0aW9uIGJ5cGFzcyAvIEFDTCBlbmZvcmNlbWVudAp8IGJ1Zy4gIFRoaXMgaXNzdWUg YWZmZWN0cyBBcGFjaGUgWm9vS2VlcGVyOiBmcm9tIDMuOS4wIHRocm91Z2ggMy45LjUsCnwgZnJv bSAzLjguMCB0aHJvdWdoIDMuOC42LiAgVXNlcnMgYXJlIHJlY29tbWVuZGVkIHRvIHVwZ3JhZGUg dG8KfCB2ZXJzaW9uIDMuOS42IG9yIDMuOC43LCB3aGljaCBmaXhlcyB0aGUgaXNzdWUuCgoKQ1ZF LTIwMjYtODQ0MzlbMV06CnwgV2hlbiBhdWRpdCBsb2dnaW5nIGlzIGVuYWJsZWQgKHpvb2tlZXBl ci5hdWRpdC5lbmFibGU9dHJ1ZSksIGFuCnwgdW5hdXRoZW50aWNhdGVkIGF0dGFja2VyIGNhbiBp bmplY3QgYXJiaXRyYXJ5IGZpZWxkcyBpbnRvIEFwYWNoZQp8IFpvb0tlZXBlcidzIGF1ZGl0IGxv ZyBieSBzZW5kaW5nIGEgZGlnZXN0IGF1dGhlbnRpY2F0aW9uIHJlcXVlc3QKfCB3aXRoIHRhYiBj aGFyYWN0ZXJzIChcdCkgZW1iZWRkZWQgaW4gdGhlIHVzZXJuYW1lLiBCZWNhdXNlIHRoZSBhdWRp dAp8IGxvZyB1c2VzIHRhYi1zZXBhcmF0ZWTCoGtleT12YWx1ZcKgZm9ybWF0LCB0aGUgaW5qZWN0 ZWQgdGFicyBhcmUKfCBwYXJzZWQgYXMgbGVnaXRpbWF0ZSBmaWVsZCBzZXBhcmF0b3JzLCBhbGxv d2luZyB0aGUgYXR0YWNrZXIgdG8KfCBzcG9vZiBhdWRpdCByZXN1bHRzIChlLmcuLCBpbmplY3Rp bmfCoHJlc3VsdD1zdWNjZXNzKSwgZm9yZ2UKfCBvcGVyYXRpb24gdHlwZXMsIGFuZCBjb3JydXB0 IGZvcmVuc2ljIGV2aWRlbmNlLiAgQSBsb2cgaW5qZWN0aW9uCnwgdnVsbmVyYWJpbGl0eSBpbiBB cGFjaGUgWm9vS2VlcGVyIGFsbG93cyBhIGNsaWVudCB0aGF0IGNhbgp8IGNhbGzCoHNldEFDTMKg dG8gaW5qZWN0IGZvcmdlZCBrZXktdmFsdWUgZmllbGRzCnwgaW50b8Kgem9va2VlcGVyX2F1ZGl0 LmxvZy4gV2hlbiBhdWRpdCBsb2dnaW5nIGlzIGVuYWJsZWQsIHRoZSBzZXJ2ZXIKfCBzZXJpYWxp emVzIGF0dGFja2VyLWNvbnRyb2xsZWQgZGlnZXN0IEFDTCBpZHMgaW50byB0aGXCoGFjbD3CoGF1 ZGl0CnwgZmllbGQgd2l0aG91dCBlc2NhcGluZyB0YWIgY2hhcmFjdGVycy4gQmVjYXVzZSBhdWRp dCBldmVudHMgYXJlCnwgZW1pdHRlZCBhcyB0YWItc2VwYXJhdGVkwqBrZXk9dmFsdWXCoHJlY29y ZHMsIGEgY3JhZnRlZCBBQ0wgaWQgY2FuCnwgbWFrZSBvbmUgc3VjY2Vzc2Z1bMKgc2V0QWNswqBl dmVudCBhcHBlYXIgdG8gY29udGFpbiBmb3JnZWQgZmllbGRzCnwgc3VjaCBhc8Kgb3BlcmF0aW9u PWRlbGV0ZcKgYW5kwqB6bm9kZT0vZm9yZ2VkLiBUaGlzIHVuZGVybWluZXMgdGhlCnwgaW50ZWdy aXR5IG9mIGRvd25zdHJlYW0gYXVkaXQgcGFyc2luZywgYWxlcnRpbmcsIGFuZCBpbmNpZGVudAp8 IHJlc3BvbnNlLiAgVGhpcyBpc3N1ZSBhZmZlY3RzIEFwYWNoZSBab29LZWVwZXI6IGZyb20gMy45 LjAgdGhyb3VnaAp8IDMuOS41LCBmcm9tIDMuOC4wIHRocm91Z2ggMy44LjYuICBVc2VycyBhcmUg cmVjb21tZW5kZWQgdG8gdXBncmFkZQp8IHRvIHZlcnNpb24gMy45LjYgb3IgMy44LjcsIHdoaWNo IGZpeGVzIHRoZSBpc3N1ZS4KCgpDVkUtMjAyNi04NDUwMVsyXToKfCBBbiB1bmF1dGhlbnRpY2F0 ZWQgYXR0YWNrZXIgY2FuIGluamVjdCBhcmJpdHJhcnkgZmFrZSBsb2cgbGluZXMgaW50bwp8IEFw YWNoZSBab29LZWVwZXIncyBvcGVyYXRpb25hbCBsb2cgYnkgc2VuZGluZyBhIGNyYWZ0ZWQKfCBh ZGRfYXV0aCgiZW5zZW1ibGUiLCAuLi4pIHJlcXVlc3QgY29udGFpbmluZyBuZXdsaW5lIGNoYXJh Y3RlcnMKfCAoXG4pLiBXaGVuIHRoZSBlbnNlbWJsZSBuYW1lIGRvZXNuJ3QgbWF0Y2gsCnwgRW5z ZW1ibGVBdXRoZW50aWNhdGlvblByb3ZpZGVyLmhhbmRsZUF1dGhlbnRpY2F0aW9uKCkgbG9ncyB0 aGUgcmF3LAp8IHVuc2FuaXRpemVkIG5hbWUgdmlhIExPRy53YXJuKCkuIEJlY2F1c2UgU0xGNEon cyB7fSBwbGFjZWhvbGRlcgp8IHByZXNlcnZlcyBlbWJlZGRlZCBuZXdsaW5lcywgdGhlIGF0dGFj a2VyIGNhbiBmb3JnZSBjb21wbGV0ZSBsb2cKfCBlbnRyaWVzIOKAlCB3aXRoIGFyYml0cmFyeSB0 aW1lc3RhbXBzLCBsb2cgbGV2ZWxzLCBjbGFzcyBuYW1lcywgYW5kCnwgbWVzc2FnZXMg4oCUIHRo YXQgYXJlIHZpc3VhbGx5IGluZGlzdGluZ3Vpc2hhYmxlIGZyb20gZ2VudWluZQp8IFpvb0tlZXBl ciBsb2cgb3V0cHV0LiAgVGhpcyBpc3N1ZSBhZmZlY3RzIEFwYWNoZSBab29LZWVwZXI6IGZyb20K fCAzLjkuMCB0aHJvdWdoIDMuOS41LCBmcm9tIDMuOC4wIHRocm91Z2ggMy44LjYuICBVc2VycyBh cmUKfCByZWNvbW1lbmRlZCB0byB1cGdyYWRlIHRvIHZlcnNpb24gMy44Ljcgb3IgMy45LjYsIHdo aWNoIGZpeGVzIHRoZQp8IGlzc3VlLgoKCklmIHlvdSBmaXggdGhlIHZ1bG5lcmFiaWxpdGllcyBw bGVhc2UgYWxzbyBtYWtlIHN1cmUgdG8gaW5jbHVkZSB0aGUKQ1ZFIChDb21tb24gVnVsbmVyYWJp bGl0aWVzICYgRXhwb3N1cmVzKSBpZHMgaW4geW91ciBjaGFuZ2Vsb2cgZW50cnkuCgpGb3IgZnVy dGhlciBpbmZvcm1hdGlvbiBzZWU6CgpbMF0gaHR0cHM6Ly9zZWN1cml0eS10cmFja2VyLmRlYmlh bi5vcmcvdHJhY2tlci9DVkUtMjAyNi03OTk5MwogICAgaHR0cHM6Ly93d3cuY3ZlLm9yZy9DVkVS ZWNvcmQ/aWQ9Q1ZFLTIwMjYtNzk5OTMKWzFdIGh0dHBzOi8vc2VjdXJpdHktdHJhY2tlci5kZWJp YW4ub3JnL3RyYWNrZXIvQ1ZFLTIwMjYtODQ0MzkKICAgIGh0dHBzOi8vd3d3LmN2ZS5vcmcvQ1ZF UmVjb3JkP2lkPUNWRS0yMDI2LTg0NDM5ClsyXSBodHRwczovL3NlY3VyaXR5LXRyYWNrZXIuZGVi aWFuLm9yZy90cmFja2VyL0NWRS0yMDI2LTg0NTAxCiAgICBodHRwczovL3d3dy5jdmUub3JnL0NW RVJlY29yZD9pZD1DVkUtMjAyNi04NDUwMQoKUGxlYXNlIGFkanVzdCB0aGUgYWZmZWN0ZWQgdmVy c2lvbnMgaW4gdGhlIEJUUyBhcyBuZWVkZWQuCgpSZWdhcmRzLApTYWx2YXRvcmUK ]