From c387452547bd7cb4c1199370968b0ce90b0e6185 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Tue, 13 Oct 2026 14:07:08 +0200 Subject: [PATCH] python3-thrift: upgrade 0.22.0 -> 0.25.0 This upgrade includes fix for 61 CVEs, many of them are for python. Add a dependency missing at least since 0.20.0 for code: lib/py/src/server/TProcessPoolServer.py:from multiprocessing import Process, Value, Condition Release announcement: [1] Release notes: [2] [1] https://lists.apache.org/thread/prryfzdozvt6t02c9k5jf46or3m7ctzy [2] https://github.com/apache/thrift/blob/v0.25.0/CHANGES.md Signed-off-by: Peter Marko Signed-off-by: Khem Raj --- .../{python3-thrift_0.24.0.bb => python3-thrift_0.25.0.bb} | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) rename meta-python/recipes-connectivity/python-thrift/{python3-thrift_0.24.0.bb => python3-thrift_0.25.0.bb} (80%) diff --git a/meta-python/recipes-connectivity/python-thrift/python3-thrift_0.24.0.bb b/meta-python/recipes-connectivity/python-thrift/python3-thrift_0.25.0.bb similarity index 80% rename from meta-python/recipes-connectivity/python-thrift/python3-thrift_0.24.0.bb rename to meta-python/recipes-connectivity/python-thrift/python3-thrift_0.25.0.bb index 257122b784..ba4bd647a7 100644 --- a/meta-python/recipes-connectivity/python-thrift/python3-thrift_0.24.0.bb +++ b/meta-python/recipes-connectivity/python-thrift/python3-thrift_0.25.0.bb @@ -2,7 +2,7 @@ SUMMARY = "Python bindings for the Apache Thrift RPC system" LICENSE = "Apache-2.0" LIC_FILES_CHKSUM = "file://PKG-INFO;beginline=8;endline=8;md5=7145f7cdd263359b62d342a02f005515" -SRC_URI[sha256sum] = "9ef601c49e988475ff0e741d8e1b45feec23b48514e524341efc274191f1789c" +SRC_URI[sha256sum] = "e85615ae9245f5622a5e36a9d2d867e1e7b17a8ca467b257dece5dc1642ccd73" inherit pypi python_setuptools_build_meta @@ -13,6 +13,7 @@ PYPI_ARCHIVE_NAME_PREFIX = "python-" RDEPENDS:${PN} += "\ python3-logging \ + python3-multiprocessing \ python3-scons \ python3-stringold \ python3-threading \