linux/meta-openembedded.git/meta-oe/recipes-devtools/protobuf, branch whinlatter

protobuf, python3-protobuf: ignore CVE-2026-6409

2026-05-08T01:52:44+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-6409 The vulnerability impacts only the PHP library component, not the cpp/python one. Ignore this CVE due to this. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit aef8bc34225cd0a56057749d0db1dfac773b17cb) Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

protobuf: ignore CVE-2026-0994

2026-03-06T04:39:08+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0994 The vulnerability impacts only the python bindings of protobuf, which is in a separate recipe (python3-protobuf, where it is patched). Ignore this CVE in this recipe due to this. Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal

protobuf: update UPSTREAM_CHECK_GITTAGREGEX

2025-11-12T17:39:00+00:00

Update UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version protobuf INFO: Current version: 6.31.1 INFO: Latest version: After the patch: $ devtool latest-version protobuf INFO: Current version: 6.31.1 INFO: Latest version: 6.31.1 INFO: Latest version's commit: 74211c0dfc2777318ab53c2cd2c317a2ef9012de Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

protobuf: Delete unused 0001-utf8_range-add-version-marker-to-library-19009.patch

2025-08-14T05:38:16+00:00

It is already present in 31.1 release anyway Signed-off-by: Khem Raj

protobuf: 5.29.5 -> 6.31.1

2025-06-26T14:26:20+00:00

Refresh local patches: - 0001-examples-Makefile-respect-CXX-LDFLAGS-variables-fix-.patch Fix protobuf build error due to recent abseil-cpp update: https://git.openembedded.org/meta-openembedded/commit/?h=master&id=e8c0e64e89b565a55d4c4fefe30a90a25fbe5831 Changelog: https://github.com/protocolbuffers/protobuf/releases/tag/v31.1 Signed-off-by: Ryan Eatmon Signed-off-by: Khem Raj

protobuf: upgrade from 5.29.4 to 5.29.5

2025-06-26T14:24:05+00:00

This is a small version bump. It includes to following two commits to fix CVE-2025-4565. 05ba1a810 Add recursion depth limits to pure python 1ef3f01c4 Internal pure python fixes Signed-off-by: Chen Qi Signed-off-by: Khem Raj

meta-openembedded/all: adapt to UNPACKDIR changes

2025-06-25T13:44:52+00:00

Please see https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265 for what changes are needed, and sed commands that can be used to make them en masse. I've verified that bitbake -c patch world works with these, but did not run a world build; the majority of recipes shouldn't need further fixups, but if there are some that still fall out, they can be fixed in followups. Signed-off-by: Alexander Kanavin Signed-off-by: Khem Raj

protobuf: Add -latomic to CXXFLAGS

2025-03-24T14:29:13+00:00

Adding to LDFLAGS works with LLD linker but not with BFD ld since it gets added before the abseil-cpp libraries on linker cmdline which does not link it and still finds the atomic function like `__atomic_store_8' as missing Use mipsarcho32 for override which covers both mips and mipsel Thanks for suggestions - RAED [1] [1] https://github.com/openembedded/meta-openembedded/pull/952 Signed-off-by: Khem Raj

protobuf: Link with libatomic on riscv32

2025-03-22T16:31:25+00:00

rv32 does not have compiler builtins for 64bit atomics Fixes | riscv32-yoe-linux-ld.lld: error: undefined reference: __atomic_load_8 | >>> referenced by /mnt/b/yoe/master/build/tmp/work/riscv32-yoe-linux/protobuf/5.29.4/recipe-sysroot/usr/lib/libabsl_cordz_info.so.2501.0.0 (disallowed by --no-allow-shlib-undefined) Signed-off-by: Khem Raj

protobuf: 4.25.5 -> 5.29.4

2025-03-21T18:07:33+00:00

Refresh local patches - 0001-Fix-build-on-mips-clang.patch - 0001-examples-Makefile-respect-CXX-LDFLAGS-variables-fix-.patch Fix protobuf-native build failure with gcc 10 Fix dev-elf QA issue: |ERROR: protobuf-5.29.4-r0 do_package_qa: QA Issue: -dev package protobuf-dev contains non-symlink .so '/usr/lib/libutf8_range.so' [dev-elf] |ERROR: protobuf-5.29.4-r0 do_package_qa: QA Issue: -dev package protobuf-dev contains non-symlink .so '/usr/lib/libutf8_validity.so' [dev-elf] Changelog: https://github.com/protocolbuffers/protobuf/releases/tag/v29.4 Signed-off-by: Hongxu Jia Signed-off-by: Khem Raj