Revisions of zeromq
buildservice-autocommit
accepted
request 1119932
from
Adam Majer (adamm)
(revision 87)
baserev update by copy to link target
Adam Majer (adamm)
committed
(revision 86)
fix license reference
Adam Majer (adamm)
committed
(revision 85)
- qemu-user.patch: upstreamed, removed
Adam Majer (adamm)
committed
(revision 84)
- update to 4.3.5: * Relicensing from LGPL-3.0+ (with custom exceptions) to MPL-2.0 is now complete. libzmq is now distributed under the Mozilla Public License 2.0. Relicensing grants have been collected from all relevant authors, and some functionality has been clean-room reimplemented where that was not possible. In layman terms, the new license provides the same rights and obligations as before. Source files are now tagged using the SPDX license identifier format. Details of the relicensing process can be seen at: #2376 Relicensing grants have been archived at: https://github.com/rlenferink/libzmq-relicense A special thanks to everybody who helped with this long and difficult task, with the process, the reimplementations, the collections and everything else. * New DRAFT (see NEWS for 4.2.0) socket options: ZMQ_BUSY_POLL will set the SO_BUSY_POLL socket option on the underlying sockets, if it is supported. ZMQ_HICCUP_MSG will send a message when the peer has been disconnected. ZMQ_XSUB_VERBOSE_UNSUBSCRIBE will configure a socket to pass all unsubscription messages, including duplicated ones. ZMQ_TOPICS_COUNT will return the number of subscribed topics on a PUB/SUB socket. ZMQ_NORM_MODE, ZMQ_NORM_UNICAST_NACK, ZMQ_NORM_BUFFER_SIZE, ZMQ_NORM_SEGMENT_SIZE, ZMQ_NORM_BLOCK_SIZE, ZMQ_NORM_NUM_PARITY, ZMQ_NORM_NUM_AUTOPARITY and ZMQ_NORM_PUSH to control various aspect of NORM sockets. See doc/zmq_setsockopt.txt and doc/zmq_getsockopt.txt for details. * New DRAFT (see NEWS for 4.2.0) zmq_ppoll APIs was added that differs from zmq_poll in the same way that ppoll differs from poll. See doc/zmq_ppoll.txt for details. * Various bug fixes and performance improvements.
buildservice-autocommit
accepted
request 1060587
from
Adam Majer (adamm)
(revision 83)
baserev update by copy to link target
Adam Majer (adamm)
accepted
request 1060458
from
Andreas Schwab (Andreas_Schwab)
(revision 82)
- qemu-user.patch: Fix build with qemu linux-user emulation
buildservice-autocommit
accepted
request 997418
from
Adam Majer (adamm)
(revision 81)
baserev update by copy to link target
Adam Majer (adamm)
accepted
request 995167
from
Dirk Mueller (dirkmueller)
(revision 80)
- drop xmlto and asciidoc buildrequires, these are only needed for non-release builds which do not ship with prebuilt docs
Adam Majer (adamm)
accepted
request 902884
from
Matej Cepl (mcepl)
(revision 79)
- Explicit BR on python is not necessary.
buildservice-autocommit
accepted
request 866585
from
Adam Majer (adamm)
(revision 78)
baserev update by copy to link target
Adam Majer (adamm)
accepted
request 866413
from
Dirk Mueller (dirkmueller)
(revision 77)
- update to 4.3.4: * ZMQ_PRIORITY will set the SO_PRIORITY socket option on the underlying sockets. Only supported on Linux. * Fixed compilation errors on kFreeBSD and GNU/Hurd * Fixed excessive amount of socket files left behind in Windows TMP * Fixed regression that breaks using IPv6 link-local addresses on Linux * Fixed compilation errors on Android * Fixed compilation error with ulibc and libbsd * Fixed stack overflow on Windows x64 * Fixed various compilation errors on Windows ARM 32bit * Fixed various compilation warnings with XCode * Fixed return value of zmq_ctx_get changed unintentionally
buildservice-autocommit
accepted
request 839566
from
Adam Majer (adamm)
(revision 76)
baserev update by copy to link target
Adam Majer (adamm)
committed
(revision 75)
Add missing bug numbers to changelog
Adam Majer (adamm)
committed
(revision 74)
- New upstream version 4.3.3: * Denial-of-Service on CURVE/ZAP-protected servers by unauthenticated clients. (CVE-2020-15166, bsc#1176116) If a raw TCP socket is opened and connected to an endpoint that is fully configured with CURVE/ZAP, legitimate clients will not be able to exchange any message. Handshakes complete successfully, and messages are delivered to the library, but the server application never receives them. For more information see the security advisory: https://github.com/zeromq/libzmq/security/advisories/GHSA-25wp-cf8g-938m * Stack overflow on server running PUB/XPUB socket (CURVE disabled). The PUB/XPUB subscription store (mtrie) is traversed using recursive function calls. In the remove (unsubscription) case, the recursive calls are NOT tail calls, so even with optimizations the stack grows linearly with the length of a subscription topic. Topics are under the control of remote clients - they can send a subscription to arbitrary length topics. An attacker can thus cause a server to create an mtrie sufficiently large such that, when unsubscribing, traversal will cause a stack overflow. For more information see the security advisory: https://github.com/zeromq/libzmq/security/advisories/GHSA-qq65-x72m-9wr8 * Memory leak in PUB server induced by malicious client(s) without CURVE/ZAP. Messages with metadata are never processed by PUB sockets, but the metadata is kept referenced in the PUB object and never freed. For more information see the security advisory: https://github.com/zeromq/libzmq/security/advisories/GHSA-4p5v-h92w-6wxw * Memory leak in client induced by malicious server(s) without CURVE/ZAP. When a pipe processes a delimiter and is already not in active state but still has an unfinished message, the message is leaked. For more information see the security advisory: https://github.com/zeromq/libzmq/security/advisories/GHSA-wfr2-29gj-5w87 * Heap overflow when receiving malformed ZMTP v1 packets (CURVE disabled).
buildservice-autocommit
accepted
request 714767
from
Dirk Mueller (dirkmueller)
(revision 73)
baserev update by copy to link target
Dirk Mueller (dirkmueller)
accepted
request 714173
from
Vítězslav Čížek (vitezslav_cizek)
(revision 72)
- New upstream version 4.3.2: * CVE-2019-13132: a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due to a buffer overflow in the library. Users running public servers with the above configuration are highly encouraged to upgrade as soon as possible, as there are no known mitigations. (bsc#1140255) * New DRAFT (see NEWS for 4.2.0) zmq_socket_monitor_versioned API that supports a versioned monitoring events protocol as a parameter. Passing 1 results in the same behaviour as zmq_socket_monitor. * New DRAFT (see NEWS for 4.2.0) zmq_socket_monitor_pipes_stats that triggers a new ZMQ_EVENT_PIPES_STATS to be delivered via zmq_socket_monitor_versioned v2 API, which contains the current status of all the queues owned by the monitored socket. See doc/zmq_socket_monitor_versioned.txt for details. * New DRAFT (see NEWS for 4.2.0) zmq_poller_fd that returns the FD of a thread safe socket. * New DRAFT (see NEWS for 4.2.0) socket options: ZMQ_XPUB_MANUAL_LAST_VALUE is similar to ZMQ_XPUB_MANUAL but allows to avoid duplicates when using last value caching. ZMQ_SOCKS_USERNAME and ZMQ_SOCKS_PASSWORD that implement SOCKS5 proxy authentication. - For complete set of changes, see https://github.com/zeromq/libzmq/releases/tag/v4.3.2
buildservice-autocommit
accepted
request 665699
from
Adam Majer (adamm)
(revision 71)
baserev update by copy to link target
Adam Majer (adamm)
committed
(revision 70)
- New upstream version 4.3.1: * CVE-2019-6250: A vulnerability has been found that would allow attackers to direct a peer to jump to and execute from an address indicated by the attacker. (bsc#1121717) * fixed race condition in ZMQ_PUSH when quickly disconnecting and reconnecting causes last part of multi-part message to get "stuck" and resent by mistake to the new socket. For complete set of changes, see, https://github.com/zeromq/libzmq/releases/tag/v4.3.1 https://github.com/zeromq/libzmq/releases/tag/v4.3.0
buildservice-autocommit
accepted
request 621887
from
Ismail Dönmez (namtrac)
(revision 69)
baserev update by copy to link target
Ismail Dönmez (namtrac)
accepted
request 621882
from
Dominique Leuenberger (dimstar)
(revision 68)
- Add baselibs.conf: build libzmq5-32bit, as it is a required dependency to libavfilter7-32bit (i.e ffmpeg 4).
Displaying revisions 1 - 20 of 87