{"old": "/home/jenkins/agent/workspace/multiarch/src-openeuler/x86-64/pulsar/old_rpms/", "new": "/home/jenkins/agent/workspace/multiarch/src-openeuler/x86-64/pulsar/new_rpms/", "compare_result": "not pass", "compare_details": {"same": {"same_details": {"old": [], "new": []}, "same_num": 0}, "diff": {"diff_details": {"pulsar": {"name": {"old": "pulsar-2.10.4-19.oe2403next.x86_64.rpm", "new": "pulsar-2.10.4-20.oe2403next.x86_64.rpm"}, "RPM Level": "level4", "rpm requires": {}, "rpm provides": {}, "rpm files": {}, "rpm jabi": {"diff": {"old": ["org.apache.pulsar-pulsar-functions-worker-2.10.4.jar", "org.apache.pulsar-pulsar-websocket-2.10.4.jar"], "new": ["org.apache.pulsar-pulsar-functions-worker-2.10.4.jar", "org.apache.pulsar-pulsar-websocket-2.10.4.jar"]}}, "rpm lib": {}}}, "diff_num": 1}, "less": {"less_details": {}, "less_num": 0}, "more": {"more_details": {}, "more_num": 0}}, "pr_link": "https://atomgit.com/src-openeuler/pulsar/pull/36", "pr_changelog": "* Wed Sep 23 2026 yanzhicong <mryanzhicong@163.com> - 2.10.4-20\n- Backport CVE-2023-51437 constant-time SASL role-token signature comparison\n- Backport CVE-2024-27894 package URL restrictions for Functions Worker\n- Backport CVE-2024-29834 authorization checks for namespace and topic management endpoints\n- Backport CVE-2024-28098 authorization checks for topic retention policy endpoints\n- Backport CVE-2022-34321 authentication and authorization for proxy statistics endpoints\n- Backport CVE-2025-30677 avoid logging Kafka connector properties\n- Backport CVE-2023-37544 remove unauthenticated WebSocket ping-pong endpoint\n"}