Created attachment 244368 [details] kafka.diff Update to 3.5.1 This is a security patch release. It upgrades the dependency, snappy-java, to a version which is not vulnerable to CVE-2023-34455. You can find more information about the CVE at Kafka CVE list. For a full list of changes, be sure to check the release notes. https://downloads.apache.org/kafka/3.5.1/RELEASE_NOTES.html
Comment on attachment 244368 [details] kafka.diff The maintainer approval flag is not propagated. I don't mind merging this change
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=eec93402d2772af3860f00fa62726ccae51740f3 commit eec93402d2772af3860f00fa62726ccae51740f3 Author: Dmitry Wagin <dmitry.wagin@ya.ru> AuthorDate: 2023-09-06 01:37:14 +0000 Commit: Robert Clausecker <fuz@FreeBSD.org> CommitDate: 2023-09-10 16:12:58 +0000 net/kafka: update to 3.5.1 Changelog: https://downloads.apache.org/kafka/3.5.1/RELEASE_NOTES.html PR: 273368 Approved by: timp87@gmail.com (maintainer) net/kafka/Makefile | 2 +- net/kafka/distinfo | 6 +++--- net/kafka/pkg-plist | 24 ++++++++++++------------ 3 files changed, 16 insertions(+), 16 deletions(-)
Thank you for your contribution.