Changelog for zeromq-draft-devel-4.3.5-3.25.1.x86_64.rpm :

* Fri Apr 05 2024 Sean Champ - update to latest upstream version, 4.3.5- using GCC 12 for build- adding a separate package set for ZeroMQ draft socket support, RPM packages: libzmq5-draft, zeromq-draft-devel, zeromq-draft-tools. The packages will be installed under a unique library dir for the ZeroMQ draft suport and may be installed in parallel to the corresponding non-draft components.- build and install fuzzer components- adding libbsd-devel, libgnutls-devel build dependencies- updating pathnames for the license file- drop bsc1176256.patch
* resolved in libzmq release 4.3.3
* https://github.com/zeromq/libzmq/pull/3902- drop bsc1176257.patch
* resolved in libzmq release 4.3.3
* https://github.com/zeromq/libzmq/commit/6815138- drop bsc1176258.patch
* resolved in libzmq release 4.3.5
* https://github.com/zeromq/libzmq/commit/a9712c0- drop bsc1176259.patch
* resolved in libzmq release 4.3.5
* https://github.com/zeromq/libzmq/commit/cf9ccbb- drop CVE-2019-13132.patch
* resolved in libzmq release 4.3.2
* https://github.com/zeromq/libzmq/issues/3558- drop CVE-2019-6250.patch
* resolved in libzmq release 4.3.5
* https://github.com/zeromq/libzmq/pull/3353- drop CVE-2020-15166.patch
* resolved in libzmq release 4.3.3
* https://github.com/zeromq/libzmq/security/advisories/GHSA-25wp-cf8g-938m- adding a zeromq-doc-html package, bundling the 0MQ reference documentation in HTML format
* Fri Oct 02 2020 Adam Majer - bsc1176256.patch: fix heap overflow when receiving malformed ZMTP v1 packets (bsc#1176256)- bsc1176257.patch: fixes a memory leak in client induced by malicious server(s) without CURVE/ZAP (bsc#1176257)- bsc1176259.patch: fix memory leak when processing PUB messages with metadata (bsc#1176259)- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription store (bsc#1176258)
* Mon Sep 07 2020 Adam Majer - CVE-2020-15166.patch: fix the possibility of unauthenticated clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)
* Wed Jul 03 2019 Vítězslav Čížek - CVE-2019-13132.patch: Fix an unauthenticated remote code execution due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)
* Thu Jan 17 2019 astiegerAATTsuse.com- mark license files using %license macro (bsc#1082318)
* Mon Jan 14 2019 adam.majerAATTsuse.de- CVE-2019-6250.patch: fix a remote execution vulnerability due to pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)
* Tue Jul 10 2018 dimstarAATTopensuse.org- Add baselibs.conf: build libzmq5-32bit, as it is a required dependency to libavfilter7-32bit (i.e ffmpeg 4).
* Thu Dec 14 2017 adam.majerAATTsuse.de- New upstream version 4.2.3
* API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket returned always true due to how the type works. When ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is not available, but ZMQ_POLLOUT always returns true anyway, which does not make sense. Now when ZMQ_ROUTER_MANDATORY is set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if at least one peer is available. Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all previously, we do not consider this a breakage warranting a major or minor version increase.
* ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still available to keep backward compatibility, and will be removed in a future release after further advance notice.
* DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and zmq_poller_poll have been changed to be inline with other existing APIs that have a timeout to return EAGAIN instead of ETIMEDOUT as the errno value.
* Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER and ZMQPUB/SUB, that were previously declared deprecated, have been reinstated as stable and supported
* Curve: all remaining traces of debug output to console are now removed, and new DRAFT events are available to properly debug CURVE, PLAIN, GSSAPI and ZAP events and failures.
* for compelete changelog see https://github.com/zeromq/libzmq/releases/tag/v4.2.3- drop remove_werror.patch: can now be disabled at configure time, if needed.
* Thu Jun 01 2017 adam.majerAATTsuse.de- remove_werror.patch: don\'t use -Werror in compiler flags- disable silent compilation flags
* Tue Mar 21 2017 adam.majerAATTsuse.de- New upstream version 4.2.2
* fix SO_NOSIGPIPE and connection closing by peer race condition
* fix IPv4-in-IPv6 mapped addresses parsing error
* zmq_z85_decode did validate its input. The function has been fixed to correctly follow RFC32 and return NULL if the input is invalid.
* for complete changelog see https://github.com/zeromq/libzmq/releases/tag/v4.2.2