Hello community, here is the log from the commit of package librdkafka for openSUSE:Factory checked in at 2020-11-05 21:53:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/librdkafka (Old) and /work/SRC/openSUSE:Factory/.librdkafka.new.11331 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "librdkafka" Thu Nov 5 21:53:12 2020 rev:8 rq:845629 version:1.5.2 Changes: -------- --- /work/SRC/openSUSE:Factory/librdkafka/librdkafka.changes 2020-09-01 20:05:25.448537859 +0200 +++ /work/SRC/openSUSE:Factory/.librdkafka.new.11331/librdkafka.changes 2020-11-05 21:53:17.120404684 +0100 @@ -1,0 +2,13 @@ +Mon Oct 26 08:08:55 UTC 2020 - Dirk Mueller <dmuel...@suse.com> + +- update to 1.5.2: + * Security fixes: There was an incorrect call to zlib's inflateGetHeader() + with unitialized memory pointers that could lead to the GZIP header of a + fetched message batch to be copied to arbitrary memory. + * The default value for the producer configuration property retries has + been increased from 2 to infinity + * The default value for the producer configuration property + request.timeout.ms has been increased from 5 to 30 seconds + * lots of bugfixes, see https://raw.githubusercontent.com/edenhill/librdkafka/v1.5.2/CHANGELOG.md + +------------------------------------------------------------------- Old: ---- v1.5.0.tar.gz New: ---- v1.5.2.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ librdkafka.spec ++++++ --- /var/tmp/diff_new_pack.w6tjjK/_old 2020-11-05 21:53:17.880402975 +0100 +++ /var/tmp/diff_new_pack.w6tjjK/_new 2020-11-05 21:53:17.884402966 +0100 @@ -24,9 +24,9 @@ %define libname %{name}1 Name: librdkafka -Version: 1.5.0 +Version: 1.5.2 Release: 0 -Summary: A library for changing configuration files +Summary: The Apache Kafka C/C++ library License: BSD-2-Clause Group: Development/Libraries/C and C++ URL: https://github.com/edenhill/librdkafka ++++++ v1.5.0.tar.gz -> v1.5.2.tar.gz ++++++ ++++ 5928 lines of diff (skipped)