python-kafka (2.0.2-12) unstable; urgency=medium

  * CVE-2026-10142 CVE-2026-10143: kafka-python contains a denial-of-service
    vulnerability in the protocol parser that allows a malicious broker or
    machine-in-the-middle attacker to exhaust memory or hang connections by
    sending a crafted 4-byte frame length value without bounds validation.
    Attackers can send a specially crafted frame length through the
    receive_bytes() function to trigger either a multi-gigabyte memory
    allocation or an uncaught ValueError that leaves the connection in a broken
    state, causing requests to hang and consumers to stop heartbeating until
    restart. Applied upstream patch: "Validate SASL/SCRAM iterations".
    (Closes: #1139878, #1139822).

 -- Thomas Goirand <zigo@debian.org>  Sat, 13 Jun 2026 16:14:41 +0200

python-kafka (2.0.2-11) unstable; urgency=medium

  * Clean-up .pybuild folder (Closes: #1045152).

 -- Thomas Goirand <zigo@debian.org>  Sun, 08 Feb 2026 22:47:36 +0100

python-kafka (2.0.2-10) unstable; urgency=medium

  * Make the build reproducible, thanks to Chris Lamb (Closes: #1120878).

 -- Thomas Goirand <zigo@debian.org>  Wed, 26 Nov 2025 15:20:11 +0100

python-kafka (2.0.2-9) unstable; urgency=medium

  * Fixed upstream CVS URLs and use mode=git in d/watch (Closes: #1082515).

 -- Thomas Goirand <zigo@debian.org>  Thu, 02 Jan 2025 15:19:21 +0100

python-kafka (2.0.2-8) unstable; urgency=medium

  * Fix depends (Closes: #1088704).

 -- Thomas Goirand <zigo@debian.org>  Fri, 20 Dec 2024 14:30:43 +0100

python-kafka (2.0.2-7) unstable; urgency=medium

  * Switch to pybuild (Closes: #1090519).

 -- Thomas Goirand <zigo@debian.org>  Thu, 19 Dec 2024 10:28:37 +0100

python-kafka (2.0.2-6) unstable; urgency=medium

  * Remove extraneous python3-unittest2 build dependency (Closes: #1066135).
  * Add fix-using-six.patch.
  * Blacklist test_send() that needs a spec for the mock.

 -- Thomas Goirand <zigo@debian.org>  Thu, 18 Apr 2024 09:26:18 +0200

python-kafka (2.0.2-5) unstable; urgency=medium

  * Removed nose and nose-timer build-depends (Closes: #1018521).

 -- Thomas Goirand <zigo@debian.org>  Wed, 23 Aug 2023 17:25:02 +0200

python-kafka (2.0.2-4) unstable; urgency=medium

  * Cleans properly (Closes: #1045152).

 -- Thomas Goirand <zigo@debian.org>  Mon, 14 Aug 2023 18:11:04 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog python3-kafka`.
