Hello community, here is the log from the commit of package mongodb for openSUSE:Factory checked in at 2017-11-03 16:26:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mongodb (Old) and /work/SRC/openSUSE:Factory/.mongodb.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mongodb" Fri Nov 3 16:26:59 2017 rev:3 rq:538323 version:3.4.10 Changes: -------- --- /work/SRC/openSUSE:Factory/mongodb/mongodb.changes 2017-05-08 19:04:34.062975290 +0200 +++ /work/SRC/openSUSE:Factory/.mongodb.new/mongodb.changes 2017-11-03 16:28:28.728286625 +0100 @@ -1,0 +2,45 @@ +Wed Nov 1 19:41:56 UTC 2017 - astie...@suse.com + +- MongoDB 3.4.10: + * The networkMessageCompressors configuration setting (aka wire + protocol compression), which is disabled by default, exposed a + vulnerability when enabled that could be exploited by a + malicious attacker to deny service or modify memory. + CVE-2017-15535 bsc#1065956 + * Avoid G_X lock for rename_collection within database + * View with collation doesn’t work as expected in sharded cluster + * Calling shardCollection after enableSharding may fail if + executed against different mongos +- includes changes from 3.4.9: + * Sharding an existing small collection results in large number + of chunks + * Reduce calls to allocator for large $in expressions + * RangeDeleter holds WT transaction open while waiting for + majority + * Range deleter assert failed because of replication lag +- includes changes from 3.4.7: + * BSON Document Size can be exceeded when grouping inserts on + SECONDARY nodes + * Enable configuration of OpenSSL cipher suite via setParameter + * Optimize incremental update performance of ChunkManager and + CollectionMetadata +- includes changrs from 3.4.6: + * Only close idle cached cursors on the WiredTiger ident that + is busy. + * $geoWithin in aggregation pipeline after $lookup and $unwind + returns incorrect results. + * Cursor opens should never block for the duration of a checkpoint. +- includes changes from 3.4.5: + * Multikey indexes should not be eligible for DISTINCT_SCAN if + distinct key is an array component. + * GlobalLock with timeout can still block indefinitely. + * mongos can segfault in getMore on views with find batchSize of + 0. +- includes changes from 3.4.4: + * Add an aggregation operator $objectToArray to convert an object + to an array of key, value pairs. + * Add an aggregation operator $arrayToObject to convert an array + of pairs to an object. + * ChunkManager refresh can occasionally cause a full reload. + +------------------------------------------------------------------- Old: ---- mongodb-src-r3.4.3.tar.gz New: ---- mongodb-src-r3.4.10.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mongodb.spec ++++++ --- /var/tmp/diff_new_pack.7a5zgd/_old 2017-11-03 16:28:30.512221696 +0100 +++ /var/tmp/diff_new_pack.7a5zgd/_new 2017-11-03 16:28:30.512221696 +0100 @@ -25,7 +25,7 @@ %bcond_with systemd %endif Name: mongodb -Version: 3.4.3 +Version: 3.4.10 Release: 0 Summary: The MongoDB document-oriented database system (metapackage) License: AGPL-3.0 @@ -196,7 +196,6 @@ --allocator=system \ %endif - %install scons \ %if 0%{?sle_version} >= 120200 @@ -240,7 +239,6 @@ install -p -m 0644 debian/mongos.1 %{buildroot}%{_mandir}/man1/ install -p -m 0644 debian/mongo.1 %{buildroot}%{_mandir}/man1/ - %pre server if ! %{_bindir}/id -g %{_mongodb_group} &>/dev/null; then %{_sbindir}/groupadd -r %{_mongodb_group} ++++++ mongodb-src-r3.4.3.tar.gz -> mongodb-src-r3.4.10.tar.gz ++++++ /work/SRC/openSUSE:Factory/mongodb/mongodb-src-r3.4.3.tar.gz /work/SRC/openSUSE:Factory/.mongodb.new/mongodb-src-r3.4.10.tar.gz differ: char 5, line 1