kumquat-buildroot/package/thrift/thrift.hash
Fabrice Fontaine 7ecbb956e2 package/thrift: security bump to version 0.14.1
Fix CVE-2020-13949: In Apache Thrift 0.9.3 to 0.13.0, malicious RPC
clients could send short messages which would result in a large memory
allocation, potentially leading to denial of service.

- Disable javascript and nodejs which have been added with
  61d502075b
- Update hash of LICENSE, license for windows-specific files added:
  98854c4874

https://github.com/apache/thrift/blob/v0.14.1/CHANGES.md

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2021-07-13 22:05:43 +02:00

5 lines
290 B
Plaintext

# From https://www.apache.org/dist/thrift/0.14.1/thrift-0.14.1.tar.gz.sha256
sha256 13da5e1cd9c8a3bb89778c0337cc57eb0c29b08f3090b41cf6ab78594b410ca5 thrift-0.14.1.tar.gz
# License files, locally calculated
sha256 d315e6cdedc07c478de6992027bfb66f220886c6216fd7e9885ced30c3703646 LICENSE