<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/meta-openembedded.git/meta-oe/recipes-devtools/protobuf, branch master-next</title>
<subtitle>Mirror of git.openembedded.org/meta-openembedded</subtitle>
<id>https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=master-next</id>
<link rel='self' href='https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=master-next'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/'/>
<updated>2026-04-20T14:35:37+00:00</updated>
<entry>
<title>protobuf, python3-protobuf: ignore CVE-2026-6409</title>
<updated>2026-04-20T14:35:37+00:00</updated>
<author>
<name>Gyorgy Sarvari</name>
<email>skandigraun@gmail.com</email>
</author>
<published>2026-04-20T09:33:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=aef8bc34225cd0a56057749d0db1dfac773b17cb'/>
<id>urn:sha1:aef8bc34225cd0a56057749d0db1dfac773b17cb</id>
<content type='text'>
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-6409

The vulnerability impacts only the PHP library component, not the
cpp/python one. Ignore this CVE due to this.

Signed-off-by: Gyorgy Sarvari &lt;skandigraun@gmail.com&gt;
Signed-off-by: Khem Raj &lt;khem.raj@oss.qualcomm.com&gt;
</content>
</entry>
<entry>
<title>protobuf-c: upgrade 1.5.1 to 1.5.2</title>
<updated>2026-04-10T14:59:52+00:00</updated>
<author>
<name>Changqing Li</name>
<email>changqing.li@windriver.com</email>
</author>
<published>2026-04-09T10:19:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=2966646af298eb17841bee4312a87832d09744d7'/>
<id>urn:sha1:2966646af298eb17841bee4312a87832d09744d7</id>
<content type='text'>
Changes[1]:
* Chase compatibility issues with Google protobuf 30.0-rc1 by @edmonds in https://github.com/protobuf-c/protobuf-c/pull/762
* protoc-gen-c: Explicitly construct strings where needed for protobuf 30.x by @edmonds in https://github.com/protobuf-c/protobuf-c/pull/768

Remove protobuf-30.patch, this patch already included in 1.5.2

[1] https://github.com/protobuf-c/protobuf-c/compare/v1.5.1...v1.5.2

Signed-off-by: Changqing Li &lt;changqing.li@windriver.com&gt;
Signed-off-by: Khem Raj &lt;khem.raj@oss.qualcomm.com&gt;
</content>
</entry>
<entry>
<title>protobuf: disable ptests for now</title>
<updated>2026-03-24T16:13:49+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@arm.com</email>
</author>
<published>2026-03-24T10:53:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=77ea4610d8d62ecb0bd3c4463172fe3b4d1a264f'/>
<id>urn:sha1:77ea4610d8d62ecb0bd3c4463172fe3b4d1a264f</id>
<content type='text'>
oe-core just moved from pkgconfig to pkgconf, which has broken the
ptest buikd due to how fragile the compilation was.

This will be revisited to build the tests properly, but for now simply
disable the ptests.

Signed-off-by: Ross Burton &lt;ross.burton@arm.com&gt;
Signed-off-by: Khem Raj &lt;khem.raj@oss.qualcomm.com&gt;
</content>
</entry>
<entry>
<title>protobuf: Upgrade to 6.33.6</title>
<updated>2026-03-21T01:29:28+00:00</updated>
<author>
<name>Khem Raj</name>
<email>khem.raj@oss.qualcomm.com</email>
</author>
<published>2026-03-21T01:28:16+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=aee9d873f746468a2ef39216fce6acc918a1712d'/>
<id>urn:sha1:aee9d873f746468a2ef39216fce6acc918a1712d</id>
<content type='text'>
Signed-off-by: Khem Raj &lt;khem.raj@oss.qualcomm.com&gt;
</content>
</entry>
<entry>
<title>protobuf: ignore CVE-2026-0994</title>
<updated>2026-02-25T06:30:28+00:00</updated>
<author>
<name>Gyorgy Sarvari</name>
<email>skandigraun@gmail.com</email>
</author>
<published>2026-02-23T19:18:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=398fa05aa8bf7ce17dc40ed99edfc6a88feeb541'/>
<id>urn:sha1:398fa05aa8bf7ce17dc40ed99edfc6a88feeb541</id>
<content type='text'>
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0994

The vulnerability impacts only the python bindings of protobuf, which
is in a separate recipe (python3-protobuf, where it is patched).

Ignore this CVE in this recipe due to this.

Signed-off-by: Gyorgy Sarvari &lt;skandigraun@gmail.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>protobuf: upgrade 6.31.1 -&gt; 6.33.5</title>
<updated>2026-02-02T08:23:13+00:00</updated>
<author>
<name>Peter Marko</name>
<email>peter.marko@siemens.com</email>
</author>
<published>2026-01-31T22:23:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=ad890c16e891277a1837c7184270d327b9010cf8'/>
<id>urn:sha1:ad890c16e891277a1837c7184270d327b9010cf8</id>
<content type='text'>
* rebase existing patches
* drop mips clang patch as this was fixed upstream via [1] to build only
  for platforms supporting it.
* add PV to SRC_URI
* add variables to automatically calculate branch and tag
* fix includedir for utf8_range in ptest compilation

[1] https://github.com/protocolbuffers/protobuf/commit/719f3037032b2e952afe7fc49152cc4be38fa7a3

Signed-off-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>protobuf: update UPSTREAM_CHECK_GITTAGREGEX</title>
<updated>2025-11-12T17:39:00+00:00</updated>
<author>
<name>Yi Zhao</name>
<email>yi.zhao@windriver.com</email>
</author>
<published>2025-11-12T13:44:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=62b2b23e0c10fbf7c337488481f3b3a070a79025'/>
<id>urn:sha1:62b2b23e0c10fbf7c337488481f3b3a070a79025</id>
<content type='text'>
Update UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable
verison.

Before the patch:
$ devtool latest-version protobuf
INFO: Current version: 6.31.1
INFO: Latest version:

After the patch:
$ devtool latest-version protobuf
INFO: Current version: 6.31.1
INFO: Latest version: 6.31.1
INFO: Latest version's commit: 74211c0dfc2777318ab53c2cd2c317a2ef9012de

Signed-off-by: Yi Zhao &lt;yi.zhao@windriver.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>protobuf: Delete unused 0001-utf8_range-add-version-marker-to-library-19009.patch</title>
<updated>2025-08-14T05:38:16+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2025-08-13T05:33:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=6482f42200b27660c75806df7df055b584a62bbc'/>
<id>urn:sha1:6482f42200b27660c75806df7df055b584a62bbc</id>
<content type='text'>
It is already present in 31.1 release anyway

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>protobuf: 5.29.5 -&gt; 6.31.1</title>
<updated>2025-06-26T14:26:20+00:00</updated>
<author>
<name>Ryan Eatmon</name>
<email>reatmon@ti.com</email>
</author>
<published>2025-06-25T23:56:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=8016c50f1558760a50bde9830655ae3864298b2a'/>
<id>urn:sha1:8016c50f1558760a50bde9830655ae3864298b2a</id>
<content type='text'>
Refresh local patches:
- 0001-examples-Makefile-respect-CXX-LDFLAGS-variables-fix-.patch

Fix protobuf build error due to recent abseil-cpp update:
https://git.openembedded.org/meta-openembedded/commit/?h=master&amp;id=e8c0e64e89b565a55d4c4fefe30a90a25fbe5831

Changelog:
https://github.com/protocolbuffers/protobuf/releases/tag/v31.1

Signed-off-by: Ryan Eatmon &lt;reatmon@ti.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>protobuf: upgrade from 5.29.4 to 5.29.5</title>
<updated>2025-06-26T14:24:05+00:00</updated>
<author>
<name>Chen Qi</name>
<email>Qi.Chen@windriver.com</email>
</author>
<published>2025-06-23T08:47:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=0f68ab613f655874f9a8958f3aca42fbb1e000dc'/>
<id>urn:sha1:0f68ab613f655874f9a8958f3aca42fbb1e000dc</id>
<content type='text'>
This is a small version bump. It includes to following two
commits to fix CVE-2025-4565.

  05ba1a810 Add recursion depth limits to pure python
  1ef3f01c4 Internal pure python fixes

Signed-off-by: Chen Qi &lt;Qi.Chen@windriver.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
</feed>
