Skip to content

libarrow: rebuild for thrift 0.24.0 - #18554

Open
kgodara912 wants to merge 1 commit into
fasttrack/3.0from
kgodara/ft-3.0/libarrow_parq_thrift
Open

libarrow: rebuild for thrift 0.24.0#18554
kgodara912 wants to merge 1 commit into
fasttrack/3.0from
kgodara/ft-3.0/libarrow_parq_thrift

Conversation

@kgodara912

@kgodara912kgodara912 commented Aug 22, 2026

Copy link
Copy Markdown

thrift 0.24.0-1 replaced libthrift-0.15.0.so with libthrift-0.24.0.so, since thrift encodes its version in the library filename. parquet-libs was linked against the old soname, so resolution fails:

nothing provides libthrift-0.15.0.so()(64bit) needed by
parquet-libs-15.0.0-8.azl3.x86_64

This also blocks the thrift CVE fixes from reaching users: upgrading thrift removes the soname the installed parquet-libs requires, so the upgrade is refused outright.

Rebuild against thrift 0.24.0. No source changes; bump release to 9.

ceph reaches thrift only transitively via libparquet.so.1500, whose soname tracks libarrow's version rather than its release, so ceph needs no rebuild.

Buddy build

thrift 0.24.0-1 replaced libthrift-0.15.0.so with libthrift-0.24.0.so,
since thrift encodes its version in the library filename. parquet-libs
was linked against the old soname, so resolution fails:
nothing provides libthrift-0.15.0.so()(64bit) needed by
parquet-libs-15.0.0-8.azl3.x86_64
This also blocks the thrift CVE fixes from reaching users: upgrading
thrift removes the soname the installed parquet-libs requires, so the
upgrade is refused outright.
Rebuild against thrift 0.24.0. No source changes; bump release to 9.
ceph reaches thrift only transitively via libparquet.so.1500, whose
soname tracks libarrow's version rather than its release, so ceph needs
no rebuild.
@kgodara912

kgodara912 commented Aug 22, 2026

Copy link
Copy Markdown
Author

The reason is explained in PR description for this release bump. Buddy build and PR checks are successful.

@kgodara912kgodara912 added the CVEFixReadyForMaintainerReview When a CVE fix has been reviewed by release manager and is ready for stable maintainer review label Aug 22, 2026
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CVEFixReadyForMaintainerReviewWhen a CVE fix has been reviewed by release manager and is ready for stable maintainer reviewfasttrack/3.0PRs Destined for Azure Linux 3.0Packagingsecurity

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@kgodara912