Skip to content

apache-pulsar/4.0.6-r0: cve remediation#63146

Merged
kwmonroe merged 2 commits into
mainfrom
cve-apache-pulsar-4.0.6-r0-2dc69909bb02fd4021f9e96b24a6a4f1
Aug 15, 2025
Merged

apache-pulsar/4.0.6-r0: cve remediation#63146
kwmonroe merged 2 commits into
mainfrom
cve-apache-pulsar-4.0.6-r0-2dc69909bb02fd4021f9e96b24a6a4f1

fixed the property defintion and removed incorrect deps

a0c3ace
Select commit
Loading
Failed to load commit list.
Octo STS / ci-diff-report succeeded Aug 15, 2025 in 0s

Package diff

Package diff

Details

Package Diffs

aarch64/apache-pulsar-4.0.6-r0.apk -> aarch64/apache-pulsar-4.0.6-r1.apk

📦 Package diff:

  &apk.Package{
  	Name:        "apache-pulsar",
- 	Version:     "4.0.6-r0",
+ 	Version:     "4.0.6-r1",
  	Arch:        "aarch64",
  	Description: "Pulsar is a distributed pub-sub messaging platform with a very f"...,
  	... // 2 identical fields
  	Maintainer: "wolfi",
  	URL:        "",
  	Checksum: []uint8{
- 		0xfd, 0x2e, 0x72, 0xcf, 0xf3, 0x1d, 0x59, 0xab, 0x53, 0x42, 0xa0, 0xc7, 0xf5, 0x37, 0x88, 0x42, // -|..r...Y.SB...7.B|
- 		0x24, 0x83, 0x0e, 0xbe,                                                                         // -|$...|
+ 		0xa6, 0x88, 0x27, 0x4e, 0xca, 0x18, 0xc7, 0x5f, 0xf9, 0xbb, 0xa5, 0xb4, 0x2a, 0xa0, 0x07, 0x56, // +|..'N..._....*..V|
+ 		0x9b, 0x1a, 0xfb, 0x38,                                                                         // +|...8|
  	},
  	Dependencies:     {"bash", "libstdc++", "openjdk-21-jre", "openssl", ...},
  	Provides:         nil,
  	InstallIf:        nil,
- 	Size:             245718986,
+ 	Size:             245814696,
- 	InstalledSize:    258377699,
+ 	InstalledSize:    258388215,
  	ProviderPriority: 0,
- 	BuildTime:        s"2025-07-31 14:57:19 +0000 UTC",
+ 	BuildTime:        s"2025-08-15 00:11:06 +0000 UTC",
- 	BuildDate:        1753973839,
+ 	BuildDate:        1755216666,
  	RepoCommit: strings.Join({
- 		"0e81e9aad03e204a581efb4b58640f07bd843a98",
+ 		"162f953e63ba1c8d90133eba71904ea30947c31b",
  	}, ""),
  	Replaces: nil,
  	DataHash: "",
  }

➕ Added:

  • usr/share/java/pulsar/lib/io.netty-netty-buffer-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-dns-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-haproxy-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-http-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-http2-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-socks-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-common-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-handler-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-handler-proxy-4.1.124.Final.jar
  • ... and 11 more

➖ Removed:

  • usr/share/java/pulsar/lib/io.netty-netty-buffer-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-dns-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-haproxy-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-http-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-http2-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-socks-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-common-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-handler-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-handler-proxy-4.1.122.Final.jar
  • ... and 11 more

🔺 Changed:

.PKGINFO
- -rw-r--r-- 533 2025-07-31 14:57:19 .PKGINFO
+ -rw-r--r-- 533 2025-08-15 00:11:06 .PKGINFO
.melange.yaml
- -rw-r--r-- 32701 2025-07-31 14:57:19 .melange.yaml
+ -rw-r--r-- 33862 2025-08-15 00:11:06 .melange.yaml
usr/share/java/pulsar/LICENSE
- -rw-r--r-- 34074 2025-07-31 14:57:19 LICENSE
+ -rw-r--r-- 34074 2025-08-15 00:11:06 LICENSE
usr/share/java/pulsar/NOTICE
- -rw-r--r-- 6612 2025-07-31 14:57:19 NOTICE
+ -rw-r--r-- 6612 2025-08-15 00:11:06 NOTICE
usr/share/java/pulsar/README
- -rw-r--r-- 1269 2025-07-31 14:57:19 README
+ -rw-r--r-- 1269 2025-08-15 00:11:06 README
usr/share/java/pulsar/bin/bookkeeper
- -rwxr-xr-x 9154 2025-07-31 14:57:19 bookkeeper
+ -rwxr-xr-x 9154 2025-08-15 00:11:06 bookkeeper
usr/share/java/pulsar/bin/function-localrunner
- -rwxr-xr-x 6946 2025-07-31 14:57:19 function-localrunner
+ -rwxr-xr-x 6946 2025-08-15 00:11:06 function-localrunner
usr/share/java/pulsar/bin/proto/MLDataFormats_pb2.py
- -rwxr-xr-x 6782 2025-07-31 14:57:19 MLDataFormats_pb2.py
+ -rwxr-xr-x 6782 2025-08-15 00:11:06 MLDataFormats_pb2.py
usr/share/java/pulsar/bin/proto/__init__.py
- -rwxr-xr-x 788 2025-07-31 14:57:19 __init__.py
+ -rwxr-xr-x 788 2025-08-15 00:11:06 __init__.py
usr/share/java/pulsar/bin/pulsar
- -rwxr-xr-x 18249 2025-07-31 14:57:19 pulsar
+ -rwxr-xr-x 18249 2025-08-15 00:11:06 pulsar
  - ... and 382 more

aarch64/apache-pulsar-compat-4.0.6-r0.apk -> aarch64/apache-pulsar-compat-4.0.6-r1.apk

📦 Package diff:

  &apk.Package{
  	Name:        "apache-pulsar-compat",
- 	Version:     "4.0.6-r0",
+ 	Version:     "4.0.6-r1",
  	Arch:        "aarch64",
  	Description: "",
  	... // 2 identical fields
  	Maintainer: "wolfi",
  	URL:        "",
  	Checksum: []uint8{
- 		0xaa, 0xcb, 0x73, 0xfb, 0xbd, 0x0b, 0xe0, 0xd1, 0xc7, 0x40, 0x99, 0xa9, 0x90, 0x9c, 0xc6, 0xf7, // -|..s......@......|
- 		0x52, 0x33, 0xeb, 0x00,                                                                         // -|R3..|
+ 		0x09, 0x51, 0xb6, 0x8b, 0x2c, 0xba, 0x45, 0x47, 0x10, 0x54, 0x22, 0x02, 0x8f, 0xdb, 0x9e, 0xc1, // +|.Q..,.EG.T".....|
+ 		0xdc, 0xdc, 0xbf, 0x11,                                                                         // +|....|
  	},
  	Dependencies:     nil,
  	Provides:         nil,
  	InstallIf:        nil,
- 	Size:             9105,
+ 	Size:             9223,
  	InstalledSize:    24050,
  	ProviderPriority: 0,
- 	BuildTime:        s"2025-07-31 14:57:19 +0000 UTC",
+ 	BuildTime:        s"2025-08-15 00:11:06 +0000 UTC",
- 	BuildDate:        1753973839,
+ 	BuildDate:        1755216666,
  	RepoCommit: strings.Join({
- 		"0e81e9aad03e204a581efb4b58640f07bd843a98",
+ 		"162f953e63ba1c8d90133eba71904ea30947c31b",
  	}, ""),
  	Replaces: nil,
  	DataHash: "",
  }

➕ Added:

  • var/lib/db/sbom/apache-pulsar-compat-4.0.6-r1.spdx.json

➖ Removed:

  • var/lib/db/sbom/apache-pulsar-compat-4.0.6-r0.spdx.json

🔺 Changed:

.PKGINFO
- -rw-r--r-- 330 2025-07-31 14:57:19 .PKGINFO
+ -rw-r--r-- 330 2025-08-15 00:11:06 .PKGINFO
.melange.yaml
- -rw-r--r-- 32701 2025-07-31 14:57:19 .melange.yaml
+ -rw-r--r-- 33862 2025-08-15 00:11:06 .melange.yaml

x86_64/apache-pulsar-4.0.6-r0.apk -> x86_64/apache-pulsar-4.0.6-r1.apk

📦 Package diff:

  &apk.Package{
  	Name:        "apache-pulsar",
- 	Version:     "4.0.6-r0",
+ 	Version:     "4.0.6-r1",
  	Arch:        "x86_64",
  	Description: "Pulsar is a distributed pub-sub messaging platform with a very f"...,
  	... // 2 identical fields
  	Maintainer: "wolfi",
  	URL:        "",
  	Checksum: []uint8{
- 		0x87, 0x19, 0x91, 0x9d, 0x97, 0x41, 0x1f, 0x4b, 0x06, 0x5d, 0xdf, 0x9b, 0xe8, 0xc7, 0x9c, 0x29, // -|.....A.K.].....)|
- 		0x14, 0x15, 0x49, 0xd4,                                                                         // -|..I.|
+ 		0x51, 0xaf, 0x83, 0xf2, 0xf5, 0x9a, 0xf7, 0x08, 0x90, 0xb2, 0xdb, 0x4e, 0xe2, 0x9a, 0x7b, 0xf7, // +|Q..........N..{.|
+ 		0x7b, 0x3b, 0x88, 0xea,                                                                         // +|{;..|
  	},
  	Dependencies:     {"bash", "libstdc++", "openjdk-21-jre", "openssl", ...},
  	Provides:         nil,
  	InstallIf:        nil,
- 	Size:             245718865,
+ 	Size:             245814053,
- 	InstalledSize:    258377699,
+ 	InstalledSize:    258396407,
  	ProviderPriority: 0,
- 	BuildTime:        s"2025-07-31 14:57:19 +0000 UTC",
+ 	BuildTime:        s"2025-08-15 00:11:06 +0000 UTC",
- 	BuildDate:        1753973839,
+ 	BuildDate:        1755216666,
  	RepoCommit: strings.Join({
- 		"0e81e9aad03e204a581efb4b58640f07bd843a98",
+ 		"162f953e63ba1c8d90133eba71904ea30947c31b",
  	}, ""),
  	Replaces: nil,
  	DataHash: "",
  }

➕ Added:

  • usr/share/java/pulsar/lib/io.netty-netty-buffer-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-dns-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-haproxy-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-http-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-http2-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-socks-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-common-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-handler-4.1.124.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-handler-proxy-4.1.124.Final.jar
  • ... and 11 more

➖ Removed:

  • usr/share/java/pulsar/lib/io.netty-netty-buffer-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-dns-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-haproxy-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-http-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-http2-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-codec-socks-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-common-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-handler-4.1.122.Final.jar
  • usr/share/java/pulsar/lib/io.netty-netty-handler-proxy-4.1.122.Final.jar
  • ... and 11 more

🔺 Changed:

.PKGINFO
- -rw-r--r-- 532 2025-07-31 14:57:19 .PKGINFO
+ -rw-r--r-- 532 2025-08-15 00:11:06 .PKGINFO
.melange.yaml
- -rw-r--r-- 32665 2025-07-31 14:57:19 .melange.yaml
+ -rw-r--r-- 33826 2025-08-15 00:11:06 .melange.yaml
usr/share/java/pulsar/LICENSE
- -rw-r--r-- 34074 2025-07-31 14:57:19 LICENSE
+ -rw-r--r-- 34074 2025-08-15 00:11:06 LICENSE
usr/share/java/pulsar/NOTICE
- -rw-r--r-- 6612 2025-07-31 14:57:19 NOTICE
+ -rw-r--r-- 6612 2025-08-15 00:11:06 NOTICE
usr/share/java/pulsar/README
- -rw-r--r-- 1269 2025-07-31 14:57:19 README
+ -rw-r--r-- 1269 2025-08-15 00:11:06 README
usr/share/java/pulsar/bin/bookkeeper
- -rwxr-xr-x 9154 2025-07-31 14:57:19 bookkeeper
+ -rwxr-xr-x 9154 2025-08-15 00:11:06 bookkeeper
usr/share/java/pulsar/bin/function-localrunner
- -rwxr-xr-x 6946 2025-07-31 14:57:19 function-localrunner
+ -rwxr-xr-x 6946 2025-08-15 00:11:06 function-localrunner
usr/share/java/pulsar/bin/proto/MLDataFormats_pb2.py
- -rwxr-xr-x 6782 2025-07-31 14:57:19 MLDataFormats_pb2.py
+ -rwxr-xr-x 6782 2025-08-15 00:11:06 MLDataFormats_pb2.py
usr/share/java/pulsar/bin/proto/__init__.py
- -rwxr-xr-x 788 2025-07-31 14:57:19 __init__.py
+ -rwxr-xr-x 788 2025-08-15 00:11:06 __init__.py
usr/share/java/pulsar/bin/pulsar
- -rwxr-xr-x 18249 2025-07-31 14:57:19 pulsar
+ -rwxr-xr-x 18249 2025-08-15 00:11:06 pulsar
  - ... and 382 more

x86_64/apache-pulsar-compat-4.0.6-r0.apk -> x86_64/apache-pulsar-compat-4.0.6-r1.apk

📦 Package diff:

  &apk.Package{
  	Name:        "apache-pulsar-compat",
- 	Version:     "4.0.6-r0",
+ 	Version:     "4.0.6-r1",
  	Arch:        "x86_64",
  	Description: "",
  	... // 2 identical fields
  	Maintainer: "wolfi",
  	URL:        "",
  	Checksum: []uint8{
- 		0x28, 0xc2, 0x29, 0x3f, 0x2e, 0xd1, 0xce, 0xa2, 0xdd, 0x81, 0xf8, 0xf0, 0x87, 0x4f, 0xf9, 0x22, // -|(.)?.........O."|
- 		0x8e, 0x96, 0x9f, 0xe2,                                                                         // -|....|
+ 		0x56, 0x32, 0xf7, 0x5d, 0xd2, 0xa2, 0x59, 0x9c, 0x98, 0x59, 0x00, 0x7f, 0x9b, 0xe5, 0x41, 0x18, // +|V2.]..Y..Y....A.|
+ 		0x7c, 0x09, 0x96, 0x9a,                                                                         // +||...|
  	},
  	Dependencies:     nil,
  	Provides:         nil,
  	InstallIf:        nil,
- 	Size:             9074,
+ 	Size:             9198,
  	InstalledSize:    24049,
  	ProviderPriority: 0,
- 	BuildTime:        s"2025-07-31 14:57:19 +0000 UTC",
+ 	BuildTime:        s"2025-08-15 00:11:06 +0000 UTC",
- 	BuildDate:        1753973839,
+ 	BuildDate:        1755216666,
  	RepoCommit: strings.Join({
- 		"0e81e9aad03e204a581efb4b58640f07bd843a98",
+ 		"162f953e63ba1c8d90133eba71904ea30947c31b",
  	}, ""),
  	Replaces: nil,
  	DataHash: "",
  }

➕ Added:

  • var/lib/db/sbom/apache-pulsar-compat-4.0.6-r1.spdx.json

➖ Removed:

  • var/lib/db/sbom/apache-pulsar-compat-4.0.6-r0.spdx.json

🔺 Changed:

.PKGINFO
- -rw-r--r-- 329 2025-07-31 14:57:19 .PKGINFO
+ -rw-r--r-- 329 2025-08-15 00:11:06 .PKGINFO
.melange.yaml
- -rw-r--r-- 32665 2025-07-31 14:57:19 .melange.yaml
+ -rw-r--r-- 33826 2025-08-15 00:11:06 .melange.yaml