[Git][security-tracker-team/security-tracker][master] Add new zookeeper issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d00fb568 by Salvatore Bonaccorso at 2026-09-19T09:47:55+02:00
Add new zookeeper issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5509,9 +5509,11 @@ CVE-2026-84850 (Improper certificate validation in the shared HTTP client used b
 CVE-2026-84829 (The Optimole  WordPress plugin before 4.2.12 does not properly escape  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-84501 (An unauthenticated attacker can inject arbitrary fake log lines into A ...)
-	TODO: check
+	- zookeeper <unfixed>
+	NOTE: https://lists.apache.org/thread/ohby1g6zjt72p0w79rhbr41nczzvr33y
 CVE-2026-84439 (When audit logging is enabled (zookeeper.audit.enable=true), an unauth ...)
-	TODO: check
+	- zookeeper <unfixed>
+	NOTE: https://lists.apache.org/thread/b7qnjvqjh393l0j07tmnb5ggg40sx3m6
 CVE-2026-84408 (QND contains an improper access control vulnerability in a named pipe, ...)
 	NOT-FOR-US: QND
 CVE-2026-84397 (Adobe Experience Manager is affected by a stored Cross-Site Scripting  ...)
@@ -6427,7 +6429,8 @@ CVE-2026-7514 (GitLab has remediated an issue in GitLab CE/EE affecting all vers
 CVE-2026-79994 (The guest-to-host Unix-domain socket relay in Docker Sandboxes validat ...)
 	TODO: check
 CVE-2026-79993 (The `deleteContainer` opcode (0x14/20) is processed without verifying  ...)
-	TODO: check
+	- zookeeper <unfixed>
+	NOTE: https://lists.apache.org/thread/9cw3rmrzhqpct26v8j18fy41bghlq8y5
 CVE-2026-79708 (GitLab has remediated an issue in GitLab EE affecting all versions fro ...)
 	NOT-FOR-US: GitLab (used to be packaged in the Debian archive as src:gitlab, but never in a stable release)
 CVE-2026-79651 (A flaw was found in the theme localization endpoints of the keycloak-s ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d00fb568323764b5f745df28d9665a0f1c41f78b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d00fb568323764b5f745df28d9665a0f1c41f78b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260919/b8957fb6/attachment.htm>