Hello community, here is the log from the commit of package zeromq for openSUSE:Factory checked in at 2019-01-25 22:41:20 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/zeromq (Old) and /work/SRC/openSUSE:Factory/.zeromq.new.28833 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "zeromq" Fri Jan 25 22:41:20 2019 rev:36 rq:665699 version:4.3.1 Changes: -------- --- /work/SRC/openSUSE:Factory/zeromq/zeromq.changes 2018-07-28 12:36:11.155939939 +0200 +++ /work/SRC/openSUSE:Factory/.zeromq.new.28833/zeromq.changes 2019-01-25 22:41:25.611371475 +0100 @@ -1,0 +2,15 @@ +Mon Jan 14 10:11:47 UTC 2019 - [email protected] + +- New upstream version 4.3.1: + * CVE-2019-6250: A vulnerability has been found that would allow + attackers to direct a peer to jump to and execute from an address + indicated by the attacker. (bsc#1121717) + * fixed race condition in ZMQ_PUSH when quickly disconnecting and + reconnecting causes last part of multi-part message to get + "stuck" and resent by mistake to the new socket. + +For complete set of changes, see, +https://github.com/zeromq/libzmq/releases/tag/v4.3.1 +https://github.com/zeromq/libzmq/releases/tag/v4.3.0 + +------------------------------------------------------------------- Old: ---- zeromq-4.2.5.tar.gz New: ---- zeromq-4.3.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ zeromq.spec ++++++ --- /var/tmp/diff_new_pack.J3iGT8/_old 2019-01-25 22:41:26.751370071 +0100 +++ /var/tmp/diff_new_pack.J3iGT8/_new 2019-01-25 22:41:26.751370071 +0100 @@ -1,7 +1,7 @@ # # spec file for package zeromq # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -23,7 +23,7 @@ %bcond_with pgm %endif Name: zeromq -Version: 4.2.5 +Version: 4.3.1 Release: 0 Summary: Lightweight messaging kernel License: LGPL-3.0-or-later ++++++ zeromq-4.2.5.tar.gz -> zeromq-4.3.1.tar.gz ++++++ ++++ 102013 lines of diff (skipped)
