Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=walnascar 2025-09-07T05:37:56+00:00 2025-09-07T05:37:56+00:00 Chen Qi Qi.Chen@windriver.com 2025-08-06T08:13:45+00:00 urn:sha1:67d9f0fdaab98b867c98b1a2231bfa58bdcb2099 This is a small version bump. It includes to following two commits to fix CVE-2025-4565. 05ba1a810 Add recursion depth limits to pure python 1ef3f01c4 Internal pure python fixes Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> 2025-03-24T14:29:13+00:00 Khem Raj raj.khem@gmail.com 2025-03-24T06:28:31+00:00 urn:sha1:7308156a132d57ab16234f2c300dd9cfb33d1782 Adding to LDFLAGS works with LLD linker but not with BFD ld since it gets added before the abseil-cpp libraries on linker cmdline which does not link it and still finds the atomic function like `__atomic_store_8' as missing Use mipsarcho32 for override which covers both mips and mipsel Thanks for suggestions - RAED [1] [1] https://github.com/openembedded/meta-openembedded/pull/952 Signed-off-by: Khem Raj <raj.khem@gmail.com> 2025-03-22T16:31:25+00:00 Khem Raj raj.khem@gmail.com 2025-03-22T05:09:34+00:00 urn:sha1:5aa1d149d9bfbbf93beb92e985e882231c7dfc78 rv32 does not have compiler builtins for 64bit atomics Fixes | riscv32-yoe-linux-ld.lld: error: undefined reference: __atomic_load_8 | >>> referenced by /mnt/b/yoe/master/build/tmp/work/riscv32-yoe-linux/protobuf/5.29.4/recipe-sysroot/usr/lib/libabsl_cordz_info.so.2501.0.0 (disallowed by --no-allow-shlib-undefined) Signed-off-by: Khem Raj <raj.khem@gmail.com> 2025-03-21T18:07:33+00:00 Hongxu Jia hongxu.jia@windriver.com 2025-03-21T05:34:14+00:00 urn:sha1:d9daf66b11dab5bb3806404a9f0cc266645f80ca Refresh local patches - 0001-Fix-build-on-mips-clang.patch - 0001-examples-Makefile-respect-CXX-LDFLAGS-variables-fix-.patch Fix protobuf-native build failure with gcc 10 Fix dev-elf QA issue: |ERROR: protobuf-5.29.4-r0 do_package_qa: QA Issue: -dev package protobuf-dev contains non-symlink .so '/usr/lib/libutf8_range.so' [dev-elf] |ERROR: protobuf-5.29.4-r0 do_package_qa: QA Issue: -dev package protobuf-dev contains non-symlink .so '/usr/lib/libutf8_validity.so' [dev-elf] Changelog: https://github.com/protocolbuffers/protobuf/releases/tag/v29.4 Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2025-03-13T16:50:11+00:00 Hongxu Jia hongxu.jia@windriver.com 2025-03-12T07:54:59+00:00 urn:sha1:ed1319272ca768bb6ec8978603282d4f0c30b024 According to [1], protobuf-c 1.5.1 has commits [2] to fix broke with protobuf 26.0 (4.26.0) Also port a patch from archlinux [3] to support protobuf 30 (4.30.0) License-Update: update copyright years to 2025 [1] https://github.com/protobuf-c/protobuf-c/issues/730 [2] https://github.com/protobuf-c/protobuf-c/pull/711/ [3] https://gitlab.archlinux.org/archlinux/packaging/packages/protobuf-c/-/blob/main/protobuf-30.patch Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2025-02-03T21:03:25+00:00 Peter Marko peter.marko@siemens.com 2025-02-03T18:22:09+00:00 urn:sha1:30e585a505c025754977305f4f2dcea737cb6d44 Add all relevant products from following query. Also remove generic "protobuf" to avoid matching golang:protobuf. .../downloads/CVE_CHECK2$ sqlite3 nvdcve_2-2.db sqlite> select vendor, product, count(*) from products where product like '%protobuf%' group by vendor, product; golang|protobuf|1 google|google-protobuf|5 google|protobuf|2 google|protobuf-cpp|4 google|protobuf-java|15 google|protobuf-javalite|12 google|protobuf-kotlin|6 google|protobuf-kotlin-lite|4 google|protobuf-python|4 protobuf|protobuf|1 protobuf-c_project|protobuf-c|2 protobufjs_project|protobufjs|3 rust-protobuf_project|rust-protobuf|2 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2025-02-03T21:03:25+00:00 Peter Marko peter.marko@siemens.com 2025-02-03T18:22:07+00:00 urn:sha1:ec554daa6cb70f8fb5be7a8c05af290756c24894 Third party components have MIT license. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2025-02-03T21:03:25+00:00 Peter Marko peter.marko@siemens.com 2025-02-03T18:22:06+00:00 urn:sha1:c7b6f0a8ce37cdd571e4361668b3f9d191ed38c9 All dependencies are used from recipe sysroot now. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2025-02-03T21:03:24+00:00 Peter Marko peter.marko@siemens.com 2025-02-03T18:22:05+00:00 urn:sha1:7bfa5c77f7ec6906d22868bf857d777bc5aab95c We should not use additional vendored jsoncpp unless required due to compatibility issues. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2025-02-03T21:03:24+00:00 Peter Marko peter.marko@siemens.com 2025-02-03T18:22:03+00:00 urn:sha1:12c7be0e8a1c07603deb6a780a5827826864a9ad This commit reverts https://git.openembedded.org/meta-openembedded/commit/?id=5af1cd3ada4cc86864810a12c82771ba1afdce64 That commit prefers sdk development instead of release images. The additional libraries are not needed for protobuf at runtime. Also any component depending on protobuf will have whole abseil-cpp in sysroots so linking all the libraries is possible and any additional ones will be installed. What may not work is if protobuf is installed in sdk image and application using it wants to use an additional abseil-cpp library. However that is easily fixable by adding also abseil-cpp to sdk. Removing hard-dependency in release images is much harder. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>