python-kafka (2.0.2-12) unstable; urgency=medium

  * CVE-2026-10142 CVE-2026-10143: kafka-python contains a denial-of-service
    vulnerability in the protocol parser that allows a malicious broker or
    machine-in-the-middle attacker to exhaust memory or hang connections by
    sending a crafted 4-byte frame length value without bounds validation.
    Attackers can send a specially crafted frame length through the
    receive_bytes() function to trigger either a multi-gigabyte memory
    allocation or an uncaught ValueError that leaves the connection in a broken
    state, causing requests to hang and consumers to stop heartbeating until
    restart. Applied upstream patch: "Validate SASL/SCRAM iterations".
    (Closes: #1139878, #1139822).

 -- Thomas Goirand <zigo@debian.org>  Sat, 13 Jun 2026 16:14:41 +0200

python-kafka (2.0.2-11) unstable; urgency=medium

  * Clean-up .pybuild folder (Closes: #1045152).

 -- Thomas Goirand <zigo@debian.org>  Sun, 08 Feb 2026 22:47:36 +0100

python-kafka (2.0.2-10) unstable; urgency=medium

  * Make the build reproducible, thanks to Chris Lamb (Closes: #1120878).

 -- Thomas Goirand <zigo@debian.org>  Wed, 26 Nov 2025 15:20:11 +0100

python-kafka (2.0.2-9) unstable; urgency=medium

  * Fixed upstream CVS URLs and use mode=git in d/watch (Closes: #1082515).

 -- Thomas Goirand <zigo@debian.org>  Thu, 02 Jan 2025 15:19:21 +0100

python-kafka (2.0.2-8) unstable; urgency=medium

  * Fix depends (Closes: #1088704).

 -- Thomas Goirand <zigo@debian.org>  Fri, 20 Dec 2024 14:30:43 +0100

python-kafka (2.0.2-7) unstable; urgency=medium

  * Switch to pybuild (Closes: #1090519).

 -- Thomas Goirand <zigo@debian.org>  Thu, 19 Dec 2024 10:28:37 +0100

python-kafka (2.0.2-6) unstable; urgency=medium

  * Remove extraneous python3-unittest2 build dependency (Closes: #1066135).
  * Add fix-using-six.patch.
  * Blacklist test_send() that needs a spec for the mock.

 -- Thomas Goirand <zigo@debian.org>  Thu, 18 Apr 2024 09:26:18 +0200

python-kafka (2.0.2-5) unstable; urgency=medium

  * Removed nose and nose-timer build-depends (Closes: #1018521).

 -- Thomas Goirand <zigo@debian.org>  Wed, 23 Aug 2023 17:25:02 +0200

python-kafka (2.0.2-4) unstable; urgency=medium

  * Cleans properly (Closes: #1045152).

 -- Thomas Goirand <zigo@debian.org>  Mon, 14 Aug 2023 18:11:04 +0200

python-kafka (2.0.2-3) unstable; urgency=medium

  * Add Fixes-ypeError_Population_must_be_a_sequence.patch (Closes: #1026497).

 -- Thomas Goirand <zigo@debian.org>  Fri, 13 Jan 2023 08:44:22 +0100

python-kafka (2.0.2-2) unstable; urgency=medium

  * Uploading to unstable.

 -- Thomas Goirand <zigo@debian.org>  Wed, 29 Sep 2021 12:31:58 +0200

python-kafka (2.0.2-1) experimental; urgency=medium

  * New upstream release.
  * Rebase and refresh patches.

 -- Thomas Goirand <zigo@debian.org>  Wed, 25 Aug 2021 09:34:29 +0200

python-kafka (2.0.1-2) unstable; urgency=medium

  * Uploading to unstable.

 -- Thomas Goirand <zigo@debian.org>  Sun, 10 May 2020 01:44:48 +0200

python-kafka (2.0.1-1) experimental; urgency=medium

  * New upstream version (Closes: #946457).
  * d/control:
    - Add me to uploaders
    - Bump debhelper-compat
    - Bump standards-version
  * d/copyright: Add me to copyright
  * d/PKG-INFO: Update PKG-INFO
  * d/patches: Add skip-integration-test.patch

 -- Michal Arbet <michal.arbet@ultimum.io>  Thu, 30 Apr 2020 10:16:11 +0200

python-kafka (1.4.6-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * Running wrap-and-sort -bast
  * Use debhelper-compat instead of debian/compat.

  [ Thomas Goirand ]
  * New upstream release.
  * Removed Python 2 support (Closes: #937864).
  * Rebased remove-multiple-privacy-breaches.patch.
  * Rebased remove-old-lz4-test.patch.

 -- Thomas Goirand <zigo@debian.org>  Sun, 08 Sep 2019 12:53:09 +0200

python-kafka (1.4.3-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Use team+openstack@tracker.debian.org as maintainer

  [ Thomas Goirand ]
  * New upstream release.
  * Using python3 -m sphinx to build the doc.
  * Removed py37-compat.patch applied upstream.
  * Rebased remove-multiple-privacy-breaches.patch.
  * Removed do-not-test-lz4-compression.patch, now obsolete.
  * Add do-not-test-with-old-lz4.patch.

 -- Thomas Goirand <zigo@debian.org>  Fri, 07 Sep 2018 10:18:37 +0200

python-kafka (1.3.3-4) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Set Vcs-* to salsa.debian.org

  [ Thomas Goirand ]
  * Apply upstream patch for Python 3.7 compat with the async keyword. Thanks
    to James Page for forwarding the patch (Closes: #903031).

 -- Thomas Goirand <zigo@debian.org>  Tue, 10 Jul 2018 18:04:43 +0200

python-kafka (1.3.3-3) unstable; urgency=medium

  * Add remove-old-lz4-test.patch (Closes: #881986).

 -- Thomas Goirand <zigo@debian.org>  Fri, 17 Nov 2017 12:11:12 +0000

python-kafka (1.3.3-2) unstable; urgency=medium

  * Uploading to unstable (Closes: #834033).
  * Switched to debhelper 10.
  * Removed pre-depends on dpkg version.
  * Standards-Version is now 4.1.1.
  * Add patch to remove multiple privacy breaches in docs.
  * Remove docs/license.rst before building docs.

 -- Thomas Goirand <zigo@debian.org>  Wed, 01 Nov 2017 10:38:17 +0000

python-kafka (1.3.3-1) experimental; urgency=medium

  [ Daniel Baumann ]
  * Updating vcs fields.
  * Updating copyright format url.
  * Updating maintainer field.
  * Running wrap-and-sort -bast.
  * Updating standards version to 4.0.0.
  * Removing gbp.conf, not used anymore or should be specified in the
    developers dotfiles.
  * Updating standards version to 4.0.1.
  * Updating standards version to 4.1.0.

  [ Thomas Goirand ]
  * New upstream release.
  * Added unittest2 and pytest as build-depends.
  * Rebased do-not-use-sphinxcontrib.napoleon-theme.patch.
  * Do not test with lz4 compression (broken?).

 -- Thomas Goirand <zigo@debian.org>  Sun, 17 Sep 2017 20:28:34 +0000

python-kafka (0.9.5-2) unstable; urgency=medium

  [ Ondřej Nový ]
  * Standards-Version is 3.9.8 now (no change)
  * d/rules: Changed UPSTREAM_GIT protocol to https

  [ Thomas Goirand ]
  * Add missing python-sphinx-rtd-theme build-dep (Closes: #830378).
  * Using pkgos-dh_auto_install.
  * Add no-intersphinx.patch.

 -- Thomas Goirand <zigo@debian.org>  Mon, 11 Jul 2016 11:11:11 +0200

python-kafka (0.9.5-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * Fixed VCS URLs (https).

  [ Thomas Goirand ]
  * New upstream release.
  * Fixed debian/copyright ordering.
  * Standards-Version: 3.9.7 (no change).

 -- Thomas Goirand <zigo@debian.org>  Wed, 02 Mar 2016 13:50:34 +0000

python-kafka (0.9.3-2) unstable; urgency=medium

  * Added missing python-mock build-deps.
  * Added PYTHONPATH=. when building sphinx doc.

 -- Thomas Goirand <zigo@debian.org>  Tue, 17 Feb 2015 15:22:08 +0000

python-kafka (0.9.3-1) unstable; urgency=medium

  * Initial release. (Closes: #778619)

 -- Thomas Goirand <zigo@debian.org>  Tue, 17 Feb 2015 15:35:34 +0100
