kumquat-buildroot/package/thrift/thrift.hash

# From https://www.apache.org/dist/thrift/0.13.0/thrift-0.13.0.tar.gz.sha256
sha256  7ad348b88033af46ce49148097afe354d513c1fca7c607b59c33ebb6064b5179  thrift-0.13.0.tar.gz
# License files, locally calculated
sha256  23df881cec3192d1f4474633c14eb2ec30a45b84f8daeb82b9de5d2bd3ac8218  LICENSE
package/thrift: security bump to v0.13 Drop patch because the linker error no longer appears on br-x86-64-musl. v0.13.0 fixes the following CVEs: CVE-2019-0205: In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings. CVE-2019-0210: In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data. Also update the hash file to the new two-spaces convention Signed-off-by: Titouan Christophe <titouan.christophe@railnova.eu> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2020-04-08 11:50:55 +02:00			`# From https://www.apache.org/dist/thrift/0.13.0/thrift-0.13.0.tar.gz.sha256`
			`sha256 7ad348b88033af46ce49148097afe354d513c1fca7c607b59c33ebb6064b5179 thrift-0.13.0.tar.gz`
package/thrift: bump to 0.12.0, add support for openssl 1.1.x Switching to CMake as the autotools are not crosscompiler compatible. Removed the patches related to autotools as no longer used. Added patch to avoid linker issue. Added license hash. Signed-off-by: Patrick Havelange <patrick.havelange@essensium.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2019-01-29 10:39:17 +01:00			`# License files, locally calculated`
package/thrift: security bump to v0.13 Drop patch because the linker error no longer appears on br-x86-64-musl. v0.13.0 fixes the following CVEs: CVE-2019-0205: In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings. CVE-2019-0210: In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data. Also update the hash file to the new two-spaces convention Signed-off-by: Titouan Christophe <titouan.christophe@railnova.eu> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2020-04-08 11:50:55 +02:00			`sha256 23df881cec3192d1f4474633c14eb2ec30a45b84f8daeb82b9de5d2bd3ac8218 LICENSE`