Coordination Service for Distributed Applications
apache:zookeeper from the portThe `deleteContainer` opcode (0x14/20) is processed without verifying the caller's ACL permissions, allowing any authenticated client to delete specific znodes in the data tree regardless of the ACL restrictions on the znode or its parent. This opcode is considered internal-only and the official client doesn't have API for it, but a client that can open a p…
Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check. An attacker can discover ACL-restricted paths by registering exists-watches on non-existent paths, then reconnecting after the paths are created with restricted ACLs. Issue is caused by incomplete fix for CVE-2024-23944 (ZOOKEEPER-4799). The fix added ACL ch…
Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=true, and ssl.quorum.clientHostnameVerification=true are enabled, the Java SSLSocket quorum path accepts a CA-trusted peer certificate whose SAN does not match the connected host. A …
Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration values are exposed at INFO level logging rendering potential production systems affected by the issue. Users are recommended to upg…
Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must present a certificate which is trusted by ZKTrustManager wh…
When audit logging is enabled (zookeeper.audit.enable=true), an unauthenticated attacker can inject arbitrary fields into Apache ZooKeeper's audit log by sending a digest authentication request with tab characters (\t) embedded in the username. Because the audit log uses tab-separated key=value format, the injected tabs are parsed as legitimate field separa…
An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted add_auth("ensemble", ...) request containing newline characters (\n). When the ensemble name doesn't match, EnsembleAuthenticationProvider.handleAuthentication() logs the raw, unsanitized name via LOG.warn(). Because SLF4J's {} placeh…
Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It allows an attacker to monitor child znodes by attaching a persistent watcher (addWatch command) to a parent which the attacker has already access to. ZooKeeper server doesn't do ACL check when the persistent watcher is triggered and as a consequence, the …
pkg audit reports nothing for this version.*/*: bump portrevision after java_default=25 update Included all ports that have USES=java. PR: 29355986813e9ccf
*/*: bump portrevision after java_default=21 update PR: 2728552baaf16375
Mk/**java.mk: Convert bsd.java.mk to USES The following features have been added or changed: - Instead of USE_JAVA use USES=java. This defaults to USES=java:build,run if NO_BUILD is undefined. Else it defaults to USES=java:run - Instead of USE_ANT=yes use USES=java:ant which also implies USES=java:build - Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or extract - Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply build or run - Instead of JAVA_RUN=yes use USES=java:run does not imply extract or build - Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version> Approved by: mat (portmgr), glewis Differential Revision: https://reviews.freebsd.org/D482010835676e36
devel/zookeeper: Update version 3.8.1=>3.8.3 - Fixes critical security vulnerability - Return to pool - Add entry in vuxml PR: 275999 Approved by: submitter is maintainer0257d72435
devel/{lib}zookeeper: Update to 3.8.1
ChangeLog: https://zookeeper.apache.org/doc/r3.8.1/releasenotes.html
PR: 269716
Reported by: dmitry.wagin@ya.ru8a6773db9aRemove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
devel/zookeeper: Update to 3.8.0 ChangeLog: https://zookeeper.apache.org/doc/r3.8.0/releasenotes.html Add note in pkg-message on how to properly update from to 3.8.0 PR: 264616 Reported by: dmitry.wagin@ya.ru (maintainer) Reviewed by: eduardo@1dd965b536
devel/zookeeper: Update log4j to 2.17 Fix CVE-2021-45105 PR: 260570fd1a56edee
devel/zookeeper: Update log4j to 2.16 Fix CVE-2021-44228 / CVE-2021-45046 PR: 260481afc7a8e483
devel/zookeeper: Add CPE information Approved by: portmgr (blanket)ed0dbe01d5
devel/zookeeper: Update to 3.7.0 PR: 25597084503ac059
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
all: Remove all other $FreeBSD keywords.135fdeebb9
Remove # $FreeBSD$ from Makefiles.305f148f48
devel/zookeeper: Update to 3.6.2 Changelog: https://zookeeper.apache.org/doc/r3.6.2/releasenotes.html PR: 250373 Submitted by: Dmitry Wagin <dmitry.wagin@ya.ru> (maintainer) Approved by: tcberner (mentor) Differential Revision: https://reviews.freebsd.org/D268284863a47167
devel/zookeeper: update 3.5.5 -> 3.6.1 devel/libzookeeper: update 3.5.5 -> 3.6.1 - submitter becomes maintainer PR: 246920 Submitted by: Dmitry Wagin <dmitry.wagin@ya.ru> Approved by: skreuzer (maintainer) Relnotes: https://zookeeper.apache.org/doc/r3.6.1/releasenotes.html16411b8344
Update to version 3.5.5 PR: 238283 Submitted by: Dmitry Wagin <dmitry.wagin@ya.ru>98832d04a8
Add DOCS options to ports that should have one. Also various fixes related to said option. PR: 230864 Submitted by: mat exp-runs by: antoinee1bfdfbe56
Update to version 3.4.12f0c2038b3f
Set JAVA_VERSION to 1.7+ Remove JAVA_VENDOR PR: 222362 Submitted by: ari@ish.com.au167db6457c
Add ability to pass JVM options to rc script Add LICENSE Define config files as @sample PR: 220815 Submitted by: timp87@gmail.comcf736a72df
Update to version 3.4.109d0a4876d6
Upgrade to 3.7.9 Approved by: Steven Kreuzer <skreuzer@FreeBSD.org> (maintainer) PR: 2145355cd8426b9b
Remove unneeded usage of:
- MASTER_SITE_SUBDIR
- ${MASTER_SITES_FOO}
- :DEFAULT (and use a default when appropriate)
Sponsored by: Absolight7f304f0633Convert tab after WWW: in pkg-descrs to single space as per PHB Approved by: portmgr blanket54a08f6954
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.
With hat: portmgr
Sponsored by: Absolight4e1b79a0a6- Fix link pointing to STAGEDIR after install, this fixes runtime error: /jline.jar:/usr/local/share/java/classes/zookeeper.jar: org.apache.zookeeper.server.quorum.QuorumPeerMain /usr/local/etc/zookeeper/zoo.cfg"' Error: Could not find or load main class org.apache.zookeeper.server.quorum.QuorumPeerMain - Add NO_ARCH - There's no need to include bsd.port.pre.mk - Use options helper - Remove deprecated @dirrmtry from pkg-plist PR: 206739 Submitted by: myself Approved by: maintainer MFH: 2016Q1608e3ae09e
Upgrade to version 3.4.7 Update the port to honor localbase instead of installing everything under /usr/local/zookeeper Make use of freebsd ports for dependencies instead of installing copies provided by the distfilee888a29c0b
Upgrade to version 3.4.7 Update the port to honor localbase instead of installing everything under /usr/local/zookeeper Make use of freebsd ports for dependencies instead of installing copies provided by the distfile2954ec9742
Replace devel/cppunit with devel/cppunit113. Approved by: bdrewery (maintainer)dc4a34e11a
- Add missing DOCS options Approved by: portmgr blanket2244feee87
- Switch to options helpers - While here, add some NO_ARCHes Approved by: portmgr blanketc7e624b321
MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.
While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.
Also, replace some EXTRACT_SUFX occurences with USES=tar:*.
Checked by: make fetch-urlall-list
With hat: portmgr
Sponsored by: Absolight60d1a83c2adevel/zookeeper: add CPE information - Fix pkg-plist issues while here - Maintainer's timeout (skreuzer@FreeBSD.org) PR: 198909 Submitted by: Shun <shun.fbsd.pr@dropcut.net>46e9aae217
Cleanup plist282a9bc4b9
Remove the RESETPREFIX hack4571e874c3
- Move RESETPREFIX to default PLIST_SUB With hat: portmgr69f82727cf
Add JAVA_HOME to SUB_LIST Submitted by: Dmitry Sivachenko <demon@freebsd.org>798deeaea1
Fix issue preventing zookeeper from starting when using service(8) Add ability to disable JMX in zookeeper by setting zookeeper_jmx=NO Link to command line client zkCli.sh added to ${PREFIX}/bin
PR: 191536
Submitted by: Radim Kolar <hsn@sendmail.cz>4731d1e3f2Use a standard DOCS option.ba2806b735
- Update to 3.4.6 - Stage - Fix startup scripts - Remove C/Python bindings, will be readded in separate ports hopefully soon - Update description and comment - Pet portlint PR: ports/185896 Submitted by: Bartek Rutkowski <ports@robakdesign.com> Approved by: Steven Kreuzer <skreuzer@freebsd.org> (maintainer)30be25de92
Take over maintainership Convert LIB_DEPENDS to new format Approved by: gnn (maintainer)a3e04eafee
Python cleanup: - USE_PYTHON* = 2.X -> USE_PYTHON* = 2 - USE_PYTHON* = 2.X+ -> USE_PYTHON* = yes Reviewed by: python (mva, rm) Approved by: portmgr-lurkers (mat)50f8eaece1
- rename AL2 to APACHE20 in Mk/bsd.licenses.db.mk - svn move Templates/Licenses/AL2 Templates/Licenses/APACHE20 - add APACHE10 and APACHE11 to Mk/bsd.licenses.db.mk - add entry in UPDATING - bulk change all ports AL2 => APACHE20 - math/openfst/pkg-plist: remove share/licenses/openfst-1.3.4 PR: ports/184785 Submitted by: ohauer Reviewed by: tabthorpe Approved by: portmgr (tabthorpe@)4fb1cfb1cd
- Fix the usage of 'python' to get rid of the implicit lang/python dependency Approved by: gnn@ (maintainer)98a31c66f7
Add NO_STAGE all over the place in preparation for the staging support (cat: devel part 4)77d32abc6b
- Fix MASTER_SITE_SUBDIR Approved by: maintainer implicitlyb22d106548
- Update to 3.3.6 - Build cleanly with C, PYTHON and DOC options - Improve rc script - Do not install Windows cmd files - Put docs to ${DOCSDIR} - Put logs to /var/log/zookeeper - Put pid file to /var/run/zookeeper/zookeeper.pid - Use ${MASTER_SITE_APACHE} as MASTER_SITES - Add LICENSE - Add WWW
PR: ports/171858
Submitted by: lwhsu
Approved by: gnn (maintainer)8a00a5dd18Fixups from jgh@: - Use standard USE_RC_SUBR (`set_rcvar` is deprecated`) - Remove stale entry from plist - Use OptionsNG, and not old options framework - Use autotools tools, and don't call specifically as a build dependency (ie. libtool, automake), automake is required - Add an additional MASTER_SITE - remove extra new line from pkg-descr - fix make install by using CONFIGURE_WRKSRC - some portlint petting was necessary Approved by: skreuzer (mentor)941374fb46