https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:43:14 +0000 https://db.gcve.eu/vuln/bit-zookeeper-2026-59969 <p><strong>Affected:</strong> Bitnami: zookeeper</p> <p>Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=true, and ssl.quorum.clientHostnameVerification=true are enabled, the Java SSLSocket quorum path accepts a CA-trusted peer certificate whose SAN does not match the connected host. A malicious or misissued peer certificate can therefore join quorum traffic, participate in leader election, and enter replication flows.</p> <p>Users are recommended to upgrade to version 3.8.7 or 3.9.6, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: zookeeper</p> <p>Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=true, and ssl.quorum.clientHostnameVerification=true are enabled, the Java SSLSocket quorum path accepts a CA-trusted peer certificate whose SAN does not match the connected host. A malicious or misissued peer certificate can therefore join quorum traffic, participate in leader election, and enter replication flows.</p> <p>Users are recommended to upgrade to version 3.8.7 or 3.9.6, which fixes the issue.</p> https://db.gcve.eu/vuln/bit-zookeeper-2026-59969 https://db.gcve.eu/vuln/certfr-2026-avi-1177 certfr-2026-avi-1177 https://db.gcve.eu/vuln/certfr-2026-avi-1177 https://db.gcve.eu/vuln/cleanstart-2026-qe83789 <p><strong>Affected:</strong> CleanStart: apache-hive</p> <p>Security vulnerability affects the apache-hive package. Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments.</p> <p><strong>Affected:</strong> CleanStart: apache-hive</p> <p>Security vulnerability affects the apache-hive package. Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments.</p> https://db.gcve.eu/vuln/cleanstart-2026-qe83789 https://db.gcve.eu/vuln/fkie_cve-2026-59969 <p>Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=true, and ssl.quorum.clientHostnameVerification=true are enabled, the Java SSLSocket quorum path accepts a CA-trusted peer certificate whose SAN does not match the connected host. A malicious or misissued peer certificate can therefore join quorum traffic, participate in leader election, and enter replication flows.</p> <p>Users are recommended to upgrade to version 3.8.7 or 3.9.6, which fixes the issue.</p> <p>Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=true, and ssl.quorum.clientHostnameVerification=true are enabled, the Java SSLSocket quorum path accepts a CA-trusted peer certificate whose SAN does not match the connected host. A malicious or misissued peer certificate can therefore join quorum traffic, participate in leader election, and enter replication flows.</p> <p>Users are recommended to upgrade to version 3.8.7 or 3.9.6, which fixes the issue.</p> https://db.gcve.eu/vuln/fkie_cve-2026-59969 https://db.gcve.eu/vuln/ghsa-4pv3-cr63-m4ph <p>Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=true, and ssl.quorum.clientHostnameVerification=true are enabled, the Java SSLSocket quorum path accepts a CA-trusted peer certificate whose SAN does not match the connected host. A malicious or misissued peer certificate can therefore join quorum traffic, participate in leader election, and enter replication flows.</p> <p>Users are recommended to upgrade to version 3.8.7 or 3.9.6, which fixes the issue.</p> <p>Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=true, and ssl.quorum.clientHostnameVerification=true are enabled, the Java SSLSocket quorum path accepts a CA-trusted peer certificate whose SAN does not match the connected host. A malicious or misissued peer certificate can therefore join quorum traffic, participate in leader election, and enter replication flows.</p> <p>Users are recommended to upgrade to version 3.8.7 or 3.9.6, which fixes the issue.</p> https://db.gcve.eu/vuln/ghsa-4pv3-cr63-m4ph https://db.gcve.eu/vuln/ubuntu-cve-2026-59969 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: zookeeper, Ubuntu:Pro:16.04:LTS: zookeeper, Ubuntu:Pro:18.04:LTS: zookeeper, Ubuntu:20.04:LTS: zookeeper, Ubuntu:22.04:LTS: zookeeper, Ubuntu:24.04:LTS: zookeeper, Ubuntu:26.04:LTS: zookeeper</p> <p>Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=true, and ssl.quorum.clientHostnameVerification=true are enabled, the Java SSLSocket quorum path accepts a CA-trusted peer certificate whose SAN does not match the connected host. A malicious or misissued peer certificate can therefore join quorum traffic, participate in leader election, and enter replication flows. Users are recommended to upgrade to version 3.8.7 or 3.9.6, which fixes the issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: zookeeper, Ubuntu:Pro:16.04:LTS: zookeeper, Ubuntu:Pro:18.04:LTS: zookeeper, Ubuntu:20.04:LTS: zookeeper, Ubuntu:22.04:LTS: zookeeper, Ubuntu:24.04:LTS: zookeeper, Ubuntu:26.04:LTS: zookeeper</p> <p>Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=true, and ssl.quorum.clientHostnameVerification=true are enabled, the Java SSLSocket quorum path accepts a CA-trusted peer certificate whose SAN does not match the connected host. A malicious or misissued peer certificate can therefore join quorum traffic, participate in leader election, and enter replication flows. Users are recommended to upgrade to version 3.8.7 or 3.9.6, which fixes the issue.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-59969