Skip to content

[Cherry-pick] Bump Thrift version from 0.13.0 to 0.14.1#10201

Closed
RyoYang wants to merge 3 commits intosonic-net:202111from
RyoYang:bump-thrift-version
Closed

[Cherry-pick] Bump Thrift version from 0.13.0 to 0.14.1#10201
RyoYang wants to merge 3 commits intosonic-net:202111from
RyoYang:bump-thrift-version

Conversation

@RyoYang
Copy link
Copy Markdown
Contributor

@RyoYang RyoYang commented Mar 10, 2022

To bump the Thrift version to 0.14.1 [Cherry-pick from #9881]

  • To avoid CVE-2020-13949

  • to fix some dependencies issues

  • rename src/thrfit_0_13_0 to src/thrift_2 to remove version number in the path. (src/thrift contains rules to build thrift 0.11.0 )

  • Add thrift sources as submodule as there are no prepared debian packages for version >0.13.0 on debian.org

  • Added patches with fixes for original thrift debian rules:(remove unneeded packages, fix multi job build)

BLDENV=buster make -f Makefile.work target/debs/buster/libthrift-dev_0.14.1_amd64.deb

Why I did it

How I did it

How to verify it

Which release branch to backport (provide reason below if selected)

  • 201811
  • 201911
  • 202006
  • 202012
  • 202106
  • 202111

Description for the changelog

Link to config_db schema for YANG module changes

A picture of a cute animal (not mandatory but encouraged)

To bump the Thrift version to 0.14.1
- To avoid [CVE-2020-13949](https://nvd.nist.gov/vuln/detail/CVE-2020-13949)
- to fix some dependencies issues

- rename `src/thrfit_0_13_0` to `src/thrift_2` to remove version number in the path. (`src/thrift` contains rules to build thrift 0.11.0  )
- Add thrift sources as submodule as there are no prepared debian packages for version >0.13.0 on [debian.org](https://packages.debian.org/search?searchon=sourcenames&keywords=thrift)
- Added patches with fixes for original thrift debian rules:(remove unneeded packages, fix multi job build)
```
BLDENV=buster make -f Makefile.work target/debs/buster/libthrift-dev_0.14.1_amd64.deb
```
@RyoYang RyoYang force-pushed the bump-thrift-version branch from ddcf524 to ed8a525 Compare March 10, 2022 08:49
Correct libsaithrift dependency package name from
LIBTHRIFT_DEV_0_14_1 THRIFT_COMPILER_0_14_1 to
LIBTHRIFT_0_14_1_DEV THRIFT_0_14_1_COMPILER

How I did it
How to verify it
Test Done:

make BLDENV=buster SAITHRIFT_V2=y -f Makefile.work target/debs/buster/saiserverv2_0.9.4_amd64.deb
@RyoYang RyoYang force-pushed the bump-thrift-version branch from b935286 to ab6966d Compare March 16, 2022 04:39
@msosyak
Copy link
Copy Markdown
Contributor

msosyak commented Mar 29, 2022

@RyoYang Please resolve the conflicts

@RyoYang
Copy link
Copy Markdown
Contributor Author

RyoYang commented Apr 11, 2022

@RyoYang Please resolve the conflicts

@msosyak This PR will be a draft and submit another PR (#10528) to fix the conflict

@msosyak
Copy link
Copy Markdown
Contributor

msosyak commented Apr 12, 2022

@RyoYang Please resolve the conflicts

@msosyak This PR will be a draft and submit another PR (#10528) to fix the conflict

So, this one should be closed?

TIP: PR could be marked as a draft by the native GitHub API

image

@RyoYang RyoYang closed this Apr 12, 2022
@RyoYang RyoYang deleted the bump-thrift-version branch April 12, 2022 08:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants