mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
https://github.com/apache/thrift/blob/v0.23.0/CHANGES.md
Fixes the following CVEs:
CVE-2026-41636: https://seclists.org/oss-sec/2026/q2/236
CVE-2026-41607: https://seclists.org/oss-sec/2026/q2/237
CVE-2026-41606: https://seclists.org/oss-sec/2026/q2/238
CVE-2026-41605: https://seclists.org/oss-sec/2026/q2/239
CVE-2026-41604: https://seclists.org/oss-sec/2026/q2/240
CVE-2026-41602: https://seclists.org/oss-sec/2026/q2/241
CVE-2026-41603: https://seclists.org/oss-sec/2026/q2/242
CVE-2025-48431: https://seclists.org/oss-sec/2026/q2/243
This commit also adds "Public Domain" in THRIFT_LICENSE, after
upstream commit [1] added a new sha256 implementation with that
license. The LICENSE file hash is also updated accordingly.
[1] 1e5fa4b9b3
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
72 lines
2.1 KiB
Makefile
72 lines
2.1 KiB
Makefile
################################################################################
|
|
#
|
|
# thrift
|
|
#
|
|
################################################################################
|
|
|
|
THRIFT_VERSION = 0.23.0
|
|
THRIFT_SITE = https://downloads.apache.org/thrift/$(THRIFT_VERSION)
|
|
THRIFT_LICENSE = Apache-2.0, Public Domain (sha256.h)
|
|
THRIFT_LICENSE_FILES = LICENSE
|
|
THRIFT_CPE_ID_VENDOR = apache
|
|
|
|
THRIFT_DEPENDENCIES = host-pkgconf host-thrift boost \
|
|
libevent openssl zlib
|
|
THRIFT_INSTALL_STAGING = YES
|
|
HOST_THRIFT_DEPENDENCIES = host-bison host-boost \
|
|
host-flex host-libevent host-openssl host-pkgconf host-zlib
|
|
|
|
THRIFT_COMMON_CONF_OPTS = -DBUILD_TUTORIALS=OFF \
|
|
-DBUILD_TESTING=OFF \
|
|
-DWITH_NODEJS=OFF \
|
|
-DWITH_PYTHON=OFF \
|
|
-DWITH_JAVA=OFF \
|
|
-DWITH_JAVASCRIPT=OFF \
|
|
-DWITH_QT5=OFF
|
|
|
|
THRIFT_CONF_OPTS = $(THRIFT_COMMON_CONF_OPTS) -DBUILD_COMPILER=OFF
|
|
HOST_THRIFT_CONF_OPTS = $(THRIFT_COMMON_CONF_OPTS) -DBUILD_COMPILER=ON
|
|
|
|
# relocation truncated to fit: R_68K_GOT16O
|
|
ifeq ($(BR2_m68k_cf),y)
|
|
THRIFT_CONF_ENV += CXXFLAGS="$(TARGET_CXXFLAGS) -mxgot"
|
|
endif
|
|
|
|
# thrift doesn't use the regular flags BUILD_{STATIC,SHARED}_LIBS
|
|
ifeq ($(BR2_STATIC_LIBS),y)
|
|
THRIFT_CONF_OPTS += -DWITH_STATIC_LIB=ON -DWITH_BOOST_STATIC=ON -DWITH_SHARED_LIB=OFF
|
|
else ifeq ($(BR2_SHARED_LIBS),y)
|
|
THRIFT_CONF_OPTS += -DWITH_STATIC_LIB=OFF -DWITH_BOOST_STATIC=OFF -DWITH_SHARED_LIB=ON
|
|
else
|
|
# BR2_SHARED_STATIC_LIBS
|
|
THRIFT_CONF_OPTS += -DWITH_STATIC_LIB=ON -DWITH_BOOST_STATIC=OFF -DWITH_SHARED_LIB=ON
|
|
endif
|
|
|
|
# Language selection for the compiler
|
|
HOST_THRIFT_CONF_OPTS += -DTHRIFT_COMPILER_CSHARP=OFF \
|
|
-DTHRIFT_COMPILER_JAVA=OFF \
|
|
-DTHRIFT_COMPILER_ERL=OFF \
|
|
-DTHRIFT_COMPILER_PY=OFF \
|
|
-DTHRIFT_COMPILER_PERL=OFF \
|
|
-DTHRIFT_COMPILER_PHP=OFF \
|
|
-DTHRIFT_COMPILER_RB=OFF \
|
|
-DTHRIFT_COMPILER_HS=OFF \
|
|
-DTHRIFT_COMPILER_GO=OFF \
|
|
-DTHRIFT_COMPILER_D=OFF \
|
|
-DTHRIFT_COMPILER_LUA=OFF \
|
|
-DBUILD_C_GLIB=OFF
|
|
|
|
# C bindings
|
|
ifeq ($(BR2_PACKAGE_LIBGLIB2),y)
|
|
THRIFT_DEPENDENCIES += libglib2
|
|
THRIFT_CONF_OPTS += -DBUILD_C_GLIB=ON
|
|
else
|
|
THRIFT_CONF_OPTS += -DBUILD_C_GLIB=OFF
|
|
endif
|
|
|
|
$(eval $(cmake-package))
|
|
$(eval $(host-cmake-package))
|
|
|
|
# to be used by other packages
|
|
THRIFT = $(HOST_DIR)/bin/thrift
|