Bug 273368

Summary: net/kafka: Update to 3.5.1
Product: Ports & Packages Reporter: Dmitry Wagin <dmitry.wagin>
Component: Individual Port(s)Assignee: Robert Clausecker <fuz>
Status: Closed FIXED    
Severity: Affects Only Me CC: fuz, timp87
Priority: --- Flags: dmitry.wagin: maintainer-feedback+
dmitry.wagin: merge-quarterly?
Version: Latest   
Hardware: Any   
OS: Any   
URL: https://downloads.apache.org/kafka/3.5.1/RELEASE_NOTES.html
Attachments:
Description Flags
kafka.diff dmitry.wagin: maintainer-approval+

Description Dmitry Wagin 2023-08-26 18:51:44 UTC 
Created attachment 244368 [details]
kafka.diff

Update to 3.5.1

This is a security patch release. It upgrades the dependency, snappy-java, to a version which is not vulnerable to CVE-2023-34455. You can find more information about the CVE at Kafka CVE list. For a full list of changes, be sure to check the release notes.

https://downloads.apache.org/kafka/3.5.1/RELEASE_NOTES.html
Comment 1 Pavel Timofeev 2023-08-26 19:03:44 UTC 
Comment on attachment 244368 [details]
kafka.diff

The maintainer approval flag is not propagated. I don't mind merging this change
Comment 2 commit-hook freebsd_committer freebsd_triage 2023-09-10 16:15:02 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=eec93402d2772af3860f00fa62726ccae51740f3

commit eec93402d2772af3860f00fa62726ccae51740f3
Author:     Dmitry Wagin <dmitry.wagin@ya.ru>
AuthorDate: 2023-09-06 01:37:14 +0000
Commit:     Robert Clausecker <fuz@FreeBSD.org>
CommitDate: 2023-09-10 16:12:58 +0000

    net/kafka: update to 3.5.1

    Changelog: https://downloads.apache.org/kafka/3.5.1/RELEASE_NOTES.html

    PR:             273368
    Approved by:    timp87@gmail.com (maintainer)

 net/kafka/Makefile  |  2 +-
 net/kafka/distinfo  |  6 +++---
 net/kafka/pkg-plist | 24 ++++++++++++------------
 3 files changed, 16 insertions(+), 16 deletions(-)
Comment 3 Robert Clausecker freebsd_committer freebsd_triage 2023-09-10 16:43:12 UTC 
Thank you for your contribution.