Debian Patches

Status for zookeeper/3.8.0-11+deb12u1

Patch Description Author Forwarded Bugs Origin Last update
03-disable-cygwin-detection.patch Disable detection of cygwin under Debian installs as this is not compatible with the way the environment is
managed through alternatives.
.
TODO - review alongside use of alternatives for managing
configuration.
Akira Kitada <akitada@gmail.com> not-needed
05-ZOOKEEPER-770.patch Slow add_auth calls with multi-threaded client no https://issues.apache.org/jira/browse/ZOOKEEPER-770
06-ftbfs-gcc-4.7.patch Fix a build failure with GCC 4.7=================================================================== Matthias Klose <doko@debian.org> yes upstream
07-remove-non-reproducible-manifest-entries.patch Remove the Built-At, Built-By and Built-On entries in the manifest of the jar files to improve the build reproducibility Emmanuel Bourg <ebourg@apache.org> no
10-cppunit-pkg-config.patch using pkg-config to grasp cppunit in the Makefile.am Rene Engelhard <rene@debian.org> not-needed 2022-06-27
11-disable-minikdc-tests.patch deactivating Minikdc tests due to missing classes tony mancill <tmancill@debian.org> not-needed 2022-06-27
12-add-yetus-annotations.patch Adds the Yetus annotations (https://yetus.apache.org) Emmanuel Bourg <ebourg@apache.org> not-needed
19-add_missing-plugins-versions.patch adding missing versions of some Maven plugins in the poms, the build fails without them. Pierre Gruet <pgt@debian.org> no 2022-06-18
20-no-Timeout-in-tests.patch omitting Timeout annotation in the tests, as it is a feature of a not yet Debian-packaged version of junit5 Pierre Gruet <pgt@debian.org> not-needed 2022-06-18
21-use-ValueSource-with-ints.patch In junit5 5.3.2, the booleans() method is not available in the ValueSource annotation class, using ints() instead. Pierre Gruet <pgt@debian.org> not-needed 2022-06-16
22-test-without_TempDir.patch building the tests without TempDir annotation, which is a feature of a not yet Debian-packaged version of junit5
Four test classes also have to be omitted as the test would not run without
the annotation.
Pierre Gruet <pgt@debian.org> not-needed 2022-06-21
23-mispell-in-bouncycastle.patch correcting mispell in call of a Bouncycastle method The former name exists but is deprecated. Pierre Gruet <pgt@debian.org> no 2022-06-18
24-tests-classifier.patch Substituting old type "test-jar" with classifier "tests". Discussed on https://github.com/mtommila/apfloat/issues/13 about
libapfloat-java, this seems to be a Debian-only issue.
Pierre Gruet <pgt@debian.org> not-needed https://sources.debian.org/src/libapfloat-java/1.10.1-1/debian/patches/managing_test_dependency.patch 2022-06-16
25-no-prometheus.patch ignoring dependency of the assembly on zookeeper-prometheus-metrics, which is not build Pierre Gruet <pgt@debian.org> not-needed 2022-06-18
26-missing-contrib-rest-dependencies.patch adding missing dependencies in zookeeper-contrib-rest pom Pierre Gruet <pgt@debian.org> no 2022-06-18
27-exclude-classes-due-to-missing-jmh.patch excluding two classes until org.openjdk.jmh gets Debian-packaged Pierre Gruet <pgt@debian.org> not-needed 2022-06-18
28-no-openssl-for-python-build.patch building the Python parts without OpenSSL support, as the main C library in zookeeper-client/zookeeper-client-c (which it relies on) would
try to use FIPS_mode if built with OpenSSL support, and this function has been
removed some versions of OpenSSL ago.
Pierre Gruet <pgt@debian.org> no 2022-06-18
29-no-javaagent.patch providing no javaagent for the tests, as org.jmockit it not packaged in Debian Pierre Gruet <pgt@debian.org> not-needed 2022-06-19
30-skip-tests-network.patch omitting the tests that need the network to be run Pierre Gruet <pgt@debian.org> not-needed 2022-06-25
31-enlarge-time-limit-in-test.patch reasonably raising some time limits in tests The default time limits may be too low for some machines Pierre Gruet <pgt@debian.org> not-needed 2022-06-29
32-scope-of-logback-dependency.patch logback artifacts are only needed by zookeeper-server, and only for its tests Pierre Gruet <pgt@debian.org> no 2022-06-26
33-spelling.patch correcting tiny spelling errors Pierre Gruet <pgt@debian.org> no 2022-06-26
34-no-rpath-with-libtool.patch hacking the libtool file so that it does not build the binaries with -rpath. Pierre Gruet <pgt@debian.org> not-needed other, https://wiki.debian.org/RpathIssue 2022-06-27
35-flaky-test.patch deactivating a test that sometimes fails -- no idea why Pierre Gruet <pgt@debian.org> not-needed 2022-07-23
36-JUnitPlatform-deprecation.patch JunitPlatform is deprecated in JUnit5, starting from the version 1.8 of junit-platform. Using Suite instead. Pierre Gruet <pgt@debian.org> no 2022-10-31
CVE-2023-44981.patch [PATCH] ZOOKEEPER-4753: zookeeper-server: Improvement: Explicit handling of DIGEST-MD5 vs GSSAPI in quorum auth

Before this, the SASL-based quorum authorizer did not explicitly
distinguish between the DIGEST-MD5 and GSSAPI mechanisms: it was
simply relying on NameCallback and PasswordCallback for authentication
with the former and examining Kerberos principals in AuthorizeCallback
for the latter.

It turns out that some SASL/DIGEST-MD5 configurations cause
authentication and authorization IDs not to match the expected format,
and the DIGEST-MD5-based portions of the quorum test suite to fail
with obscure errors. (They can be traced to failures to join the
quorum, but only by looking into detailed logs.)

This patch uses the login module name to determine whether DIGEST-MD5
or GSSAPI is used, and relaxes the authentication ID check for the
former. As a cleanup, it keeps the password-based credential map
empty when Kerberos principals are expected. It finally adapts a
test, and adds a new one, ensuring weirdly-shaped credentials only
cause authentication failures in the GSSAPI case.
Damien Diederen <ddiederen@apache.org> no 2023-09-24

All known versions for source package 'zookeeper'

Links