Files
buildroot/package/python-avro/python-avro.hash
Titouan Christophe ec1773483c package/{avro-c, python-avro}: security bump to v1.12.2
This release includes a broad round of hardening against malformed and
adversarial input across the Python SDK (bounding allocations and enforcing
decompression limits before trusting size fields read from the input).

See the release notes https://avro.apache.org/blog/2026/08/12/avro-1.12.2/

Also update the download url, because www-eu.apache.org/dist/...
is a redirection to downloads.apache.org/...

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 02d8a41f09)
Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
2026-09-03 10:36:24 +02:00

6 lines
325 B
Plaintext

# md5, sha256 from https://pypi.org/pypi/avro/json
md5 0ff774ab3e45a2d48e5b68cd688cba66 avro-1.12.2.tar.gz
sha256 e900e7b59a4781f63d9e935e88f6ec50c4d60be3f4adf9c63b51ed39d578fe08 avro-1.12.2.tar.gz
# Locally computed sha256 checksums
sha256 c79a7fea0e3cac04cd43f20e7b648e5a0ff8fa5344e644b0ee09ca1162b62747 avro/LICENSE