Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 539440 - net-libs/zeromq-4.0.5 version bump
Summary: net-libs/zeromq-4.0.5 version bump
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Library (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Alexander Vershilov (RETIRED)
URL:
Whiteboard:
Keywords: PATCH
Depends on:
Blocks: CVE-2014-7202 539442
  Show dependency tree
 
Reported: 2015-02-09 10:39 UTC by Thomas Deutschmann (RETIRED)
Modified: 2015-02-11 10:27 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
Changes for zeromq-4.0.5.ebuild (zeromq-4.0.5.ebuild.diff,18.17 KB, patch)
2015-02-09 10:39 UTC, Thomas Deutschmann (RETIRED)
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Thomas Deutschmann (RETIRED) gentoo-dev 2015-02-09 10:39:10 UTC
Created attachment 395964 [details, diff]
Changes for zeromq-4.0.5.ebuild

Hi,

please bump net-libs/zeromq to v4.0.5:


0MQ version 4.0.5 stable, released on 2014/10/14
================================================
* Fixed #1191; CURVE mechanism does not verify short term nonces.

* Fixed #1190; stream_engine is vulnerable to downgrade attacks.

* Fixed #1088; assertion failure for WSAENOTSOCK on Windows.

* Fixed #1015; race condition while connecting inproc sockets.

* Fixed #994; bump so library number to 4.0.0

* Fixed #939, assertion failed: !more (fq.cpp:99) after many ZAP requests.

* Fixed #872; lost first part of message over inproc://.

* Fixed #797, keep-alive on Windows.


I attached an ebuild diff against the current net-libs/zeromq-4.0.4-r1.ebuild. Changes:

- Support for epatch_user added

- doc USE flag addded

- Fixes bug 511526

- Fixes bug 507948

- Added patch from https://github.com/zeromq/libzmq/issues/1273 (https://github.com/zeromq/zeromq4-x/commit/b6e3e0f601e2c1ec1f3aac880ed6a3fe63043e51). Feel free to drop the patch if you don't want to include it.
Comment 1 Justin Lecher (RETIRED) gentoo-dev 2015-02-11 10:27:30 UTC
+*zeromq-4.0.5 (11 Feb 2015)
+
+  11 Feb 2015; Justin Lecher <jlec@gentoo.org> +zeromq-4.0.5.ebuild,
+  -zeromq-3.2.4-r1.ebuild, -zeromq-4.0.1-r1.ebuild, -zeromq-4.0.1.ebuild,
+  -zeromq-4.0.4-r1.ebuild, metadata.xml:
+  Version Bump, #539440; drop old, fixes two security problems, #523850; Add
+  SLOT operators, #511526; improve USE description, #507948
+