Initial commit of Apache Zookeeper a distributed coordination system. Approved by: skreuzer (mentor)28ebcc53bf
Port details
devel/zookeeper3.8.3_2
Coordination Service for Distributed Applications
- Maintainer
- ports@FreeBSD.org
- Packages
- zookeeper 3.8.3_2
- Upstream
- Higher version available: 3.9.7-1
- CPE
apache:zookeeperfrom the port- WWW
- https://zookeeper.apache.org/
- Links
- cgit · VuXML
Unaddressed (8) · The CVE record lists this version as affected, no VuXML entry names the CVE
Updating to 3.8.7 would fix 8 of 8 unaddressed CVEs, according to the CVE records.
Fixed up to each version, cumulative: 3.8.4 1 · 3.8.6 3 · 3.8.7 8
| CVE-2026-79993 | 7.5 | 2026-09-16 | The `deleteContainer` opcode (0x14/20) is processed without verifying the caller's ACL permissions, allowing any authenticated client to delete specific znodes in the da… |
| CVE-2026-59739 | 7.5 | 2026-09-16 | Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check. An attacker can discover ACL-restricted paths by registering exists-… |
| CVE-2026-59969 | 7.5 | 2026-09-16 | Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerif… |
| CVE-2026-24308 | 7.5 | 2026-03-07 | Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in c… |
| CVE-2026-24281 | 7.4 | 2026-03-07 | Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR record… |
| CVE-2026-84439 | 5.3 | 2026-09-16 | When audit logging is enabled (zookeeper.audit.enable=true), an unauthenticated attacker can inject arbitrary fields into Apache ZooKeeper's audit log by sending a diges… |
| CVE-2026-84501 | 5.3 | 2026-09-16 | An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted add_auth("ensemble", ...) request containing… |
| CVE-2024-23944 | 5.3 | 2024-03-15 | Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It allows an attacker to monitor child znodes by attaching a persist… |
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (2)
Show 2 fixed
VuXML entries whose affected range this version has left.
zookeeper -- Denial Of Serviceentered 2017-10-10