zookeeper (3.8.0-11+deb12u2) bookworm; urgency=medium

  * Team upload
  * Bug fix: CVE-2024-23944 (Closes: #1066947):
    An information disclosure in persistent watchers handling was found in
    Apache ZooKeeper due to missing ACL check.  It allows an attacker to
    monitor child znodes by attaching a persistent watcher (addWatch
    command) to a parent which the attacker has already access
    to. ZooKeeper server doesn't do ACL check when the persistent watcher
    is triggered and as a consequence, the full path of znodes that a
    watch event gets triggered upon is exposed to the owner of the
    watcher. It's important to note that only the path is exposed by this
    vulnerability, not the data of znode, but since znode path can contain
    sensitive information like user name or login ID, this issue is
    potentially critical.
  * Add salsa CI

 -- Bastien Roucariès <rouca@debian.org>  Sun, 16 Jun 2024 10:40:07 +0000

zookeeper (3.8.0-11+deb12u1) bookworm-security; urgency=medium

  * Team upload:
    - CVE-2023-44981: Prevent a potential authorisation bypass vulnerability.
      If SASL Quorum Peer authentication was enabled (via
      quorum.auth.enableSasl), authorisation was performed by verifying that
      the instance part in the SASL authentication ID was listed in the zoo.cfg
      server list. However, this value is optional, and, if missing (such as in
      'eve@EXAMPLE.COM'), the authorisation check will be skipped. As a result,
      an arbitrary endpoint could join the cluster and begin propagating
      counterfeit changes to the leader, essentially giving it complete
      read-write access to the data tree. (Closes: #1054224)

 -- Pierre Gruet <pgt@debian.org>  Sun, 29 Oct 2023 08:57:11 +0100

zookeeper (3.8.0-11) unstable; urgency=medium

  * Team upload
  * Excluding more tests needing network access (Closes: #1033436)
  * Raising Standards version to 4.6.2 (no change)
  * Update lintian override info format in d/source/lintian-overrides on line 3.
  * Set upstream metadata fields: Repository-Browse.
  * Removing dependency on lsb-base

 -- Pierre Gruet <pgt@debian.org>  Thu, 06 Apr 2023 12:25:53 +0200

zookeeper (3.8.0-10) unstable; urgency=medium

  * Team upload.
  * Rebuilt for all Python3 versions (Closes: #1024303).

 -- Thomas Goirand <zigo@debian.org>  Mon, 21 Nov 2022 11:14:39 +0100

zookeeper (3.8.0-9) unstable; urgency=medium

  * Team upload
  * Using Suite instead of deprecated JunitPlatform to run unit tests
    (Closes: #1022333)
  * Exporting LC_ALL=C.UTF-8 in d/rules

 -- Pierre Gruet <pgt@debian.org>  Mon, 31 Oct 2022 15:49:56 +0100

zookeeper (3.8.0-8) unstable; urgency=medium

  * Team upload
  * Skipping one more test accessing the network, thanks to Simon Chopin
    (Closes: #1018942)
  * Enlarging another time limit in a test

 -- Pierre Gruet <pgt@debian.org>  Fri, 02 Sep 2022 18:17:29 +0200

zookeeper (3.8.0-7) unstable; urgency=medium

  * Team upload
  * Installing the generated header file in /usr/include/zookeeper
    (Closes: #1016764)
  * Alleviating d/maven.rules

 -- Pierre Gruet <pgt@debian.org>  Mon, 15 Aug 2022 15:12:45 +0200

zookeeper (3.8.0-6) unstable; urgency=medium

  * Team upload
  * Deactivating a flaky test (Closes: #1015054)

 -- Pierre Gruet <pgt@debian.org>  Sat, 23 Jul 2022 22:46:51 +0200

zookeeper (3.8.0-5) unstable; urgency=medium

  * Team upload
  * Installing an up-to-date configuration file example in zookeeper

 -- Pierre Gruet <pgt@debian.org>  Sat, 02 Jul 2022 15:28:15 +0200

zookeeper (3.8.0-4) unstable; urgency=medium

  * Team upload
  * Adding liblog4j1.2-java as a dependency of the -java package so that its
    jar is found by libslf4j-java

 -- Pierre Gruet <pgt@debian.org>  Fri, 01 Jul 2022 21:19:09 +0200

zookeeper (3.8.0-3) unstable; urgency=medium

  * Team upload
  * Raising a bit some time limits in tests, failures can happen depending
    on the buildds

 -- Pierre Gruet <pgt@debian.org>  Wed, 29 Jun 2022 21:44:22 +0200

zookeeper (3.8.0-2) unstable; urgency=medium

  * Team upload
  * Making appropriate overrides for -arch and -indep in d/rules so that
    builds of architecture-dependent packages only succeed

 -- Pierre Gruet <pgt@debian.org>  Wed, 29 Jun 2022 17:47:37 +0200

zookeeper (3.8.0-1) unstable; urgency=medium

  * Team upload
  * New upstream version 3.8.0 (Closes: #927673):
    - Checking it is affected by no known security vulnerability
      (Closes: #990345)
    - Checking it does not use xml2-config anymore (Closes: #949517)
    - Checking the package does not FTBFS with gcc-11 (Closes: #984406)
  * Refreshing patches
  * Building with Maven, adapting B-D, refreshing d/rules and adapting install
    paths accordingly
  * Adapting install paths after switching to Maven
  * Updates in debian/control:
    - Depending on debhelper-compat 13
    - Removing X-Python3-Version field
    - Raising Standards version to 4.6.1 (no change)
    - Adding a Pre-Depends field in d/control for zookeeperd so that it
      pre-depends on init-system-helpers
    -  zookeeper needs to depend on default-jre, not only the headless version
  * Refreshing d/copyright
  * Updating / refreshing the packaging style:
    - New upstream signing keys
    - Rewriting d/watch, set to version 4, no repack
    - Removing debian/gbp.conf
    - Removing debian/orig-tar.sh, repacking is done via debian/copyright
    - Set upstream metadata fields: Bug-Database, Repository,
      Repository-Browse.
  * Providing patches related to the new Maven build:
    - Adding missing versions of some Maven plugins in the POM files
    - Skipping the unpackaged Timeout annotations in the tests
    - Using the ValueSource annotation with ints instead of booleans, which are
      not available in Debian-package junit5
    - Omitting the TempDir annotation in the tests, as it is not available yet
    - Correcting call to deprecated method in Bouncycastle
    -  Switching from test-jar type to tests classifier in the POM files
    - Omitting the dependency of the assembly POM on the
      zookeeper-prometheus-metrics jar, which cannot be built right now
    - Adding missing artifacts in the zookeeper-contrib-rest POM file
    - Skipping some classes because of unpackaged org.openjdk-jmh package
    - Building the Python3 artifacts without OpenSSL
    - Omitting test classes needing junit5 unpackaged classes or attempting to
      use the network
  * Correcting tiny spelling errors in the code
  * Reworking debian/rules:
    - Updating the overrides of dh_clean and dh_auto_clean
    - Stopping parsing changelog in d/rules
  * Providing an up-to-date d/libzookeeper-java.manifest file, updating
    dependencies of the binary package accordingly
  * Refreshing the doc-base files
  * Stopping providing zktreeutil, providing a NEWS file to explain this
  * Adding a NEWS entry about possible failure at startup and how to solve it
    (Closes: #1012770)
  * Adding a Lintian override for the embedded js in the javadoc
  * Adding a Lintian override for files with long lines
  * Adding missing patch headers
  * Hacking in the libtool file to prevent -rpath flags when building
  * Changing USER to NAME in d/zookeeper.postinst and d/zookeeper.postrm to be
    sure the script is doing the right thing (actually the shell uses USER for
    the logged in name)
  * Using --remove-home in d/zookeeper.postrm to ensure everything is properly
    deleted (Closes: #1001959)

 -- Pierre Gruet <pgt@debian.org>  Tue, 28 Jun 2022 18:02:04 +0200

zookeeper (3.4.13-6) unstable; urgency=medium

  * Team upload.
  * Fixed the build failure with OpenJDK 17 (Closes: #981923)
  * Standards-Version updated to 4.5.1

 -- Emmanuel Bourg <ebourg@apache.org>  Sun, 07 Feb 2021 23:16:46 +0100

zookeeper (3.4.13-5) unstable; urgency=medium

  [ tony mancill ]
  * Source-only upload for testing migration (Closes: #950755)
  * Set "Rules-Requires-Root: no" in debian/control

  [ Christoph Maser ]
  * Update debian/watch

 -- tony mancill <tmancill@debian.org>  Wed, 05 Feb 2020 19:54:40 -0800

zookeeper (3.4.13-4) unstable; urgency=medium

  * Team upload.

  [ Jelmer Vernooĳ ]
  * Bump debhelper from old 11 to 12.
  * Re-export upstream signing key without extra signatures.

  [ Emmanuel Bourg ]
  * Build the Python bindings with Python 3 (Closes: #938892)
  * Standards-Version updated to 4.5.0

 -- Emmanuel Bourg <ebourg@apache.org>  Sun, 26 Jan 2020 23:18:05 +0100

zookeeper (3.4.13-3) unstable; urgency=medium

  * Address FTBFS with GCC 9 (Closes: #925869)
  * Bump Standards-Version to 4.4.0
  * Freshen years in debian/copyright and update Source:

 -- tony mancill <tmancill@debian.org>  Sat, 17 Aug 2019 10:59:19 -0700

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libzookeeper-st2`.
