[oe][meta-oe][walnascar][PATCH 1/2] protobuf: upgrade from 5.29.4 to 5.29.5

[oe][meta-oe][walnascar][PATCH 1/2] protobuf: upgrade from 5.29.4 to 5.29.5

[Qi.Chen]

From: Chen Qi <Qi.Chen@windriver.com>

This is a small version bump. It includes to following two
commits to fix CVE-2025-4565.

  05ba1a810 Add recursion depth limits to pure python
  1ef3f01c4 Internal pure python fixes

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
---
 .../protobuf/{protobuf_5.29.4.bb => protobuf_5.29.5.bb}         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-devtools/protobuf/{protobuf_5.29.4.bb => protobuf_5.29.5.bb} (99%)

diff --git a/meta-oe/recipes-devtools/protobuf/protobuf_5.29.4.bb b/meta-oe/recipes-devtools/protobuf/protobuf_5.29.5.bb
similarity index 99%
rename from meta-oe/recipes-devtools/protobuf/protobuf_5.29.4.bb
rename to meta-oe/recipes-devtools/protobuf/protobuf_5.29.5.bb
index 30b805e6b1..88a979d0af 100644
--- a/meta-oe/recipes-devtools/protobuf/protobuf_5.29.4.bb
+++ b/meta-oe/recipes-devtools/protobuf/protobuf_5.29.5.bb
@@ -14,7 +14,7 @@ LIC_FILES_CHKSUM = " \
 DEPENDS = "zlib abseil-cpp jsoncpp"
 DEPENDS:append:class-target = " protobuf-native"
 
-SRCREV = "1be1c9d0ea6efa2a25bd7b76186844d1669be78a"
+SRCREV = "f5de0a0495faa63b4186fc767324f8b9a7bf4fc4"
 
 SRC_URI = "git://github.com/protocolbuffers/protobuf.git;branch=29.x;protocol=https \
            file://run-ptest \
-- 
2.34.1

[oe][meta-python][walnascar][PATCH 2/2] python3-protobuf: upgrade from 5.29.4 to 5.29.5

[Qi.Chen]

From: Chen Qi <Qi.Chen@windriver.com>

protobuf is upgraded from 5.29.4 to 5.29.5. Upgrade python3-protobuf
to sync.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
---
 .../{python3-protobuf_5.29.4.bb => python3-protobuf_5.29.5.bb}  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-python/recipes-devtools/python/{python3-protobuf_5.29.4.bb => python3-protobuf_5.29.5.bb} (95%)

diff --git a/meta-python/recipes-devtools/python/python3-protobuf_5.29.4.bb b/meta-python/recipes-devtools/python/python3-protobuf_5.29.5.bb
similarity index 95%
rename from meta-python/recipes-devtools/python/python3-protobuf_5.29.4.bb
rename to meta-python/recipes-devtools/python/python3-protobuf_5.29.5.bb
index d39c5e9790..14ab3237b9 100644
--- a/meta-python/recipes-devtools/python/python3-protobuf_5.29.4.bb
+++ b/meta-python/recipes-devtools/python/python3-protobuf_5.29.5.bb
@@ -10,7 +10,7 @@ LIC_FILES_CHKSUM = " \
 "
 
 inherit pypi setuptools3
-SRC_URI[sha256sum] = "4f1dfcd7997b31ef8f53ec82781ff434a28bf71d9102ddde14d076adcfc78c99"
+SRC_URI[sha256sum] = "bc1463bafd4b0929216c35f437a8e28731a2b7fe3d98bb77a600efced5a15c84"
 
 CVE_PRODUCT += "google:protobuf protobuf:protobuf google-protobuf protobuf-python"
 
-- 
2.34.1

Re: [oe][meta-oe][walnascar][PATCH 1/2] protobuf: upgrade from 5.29.4 to 5.29.5

[ChenQi]

Ping

On 8/6/25 16:13, Chen Qi via lists.openembedded.org wrote:
> From: Chen Qi <Qi.Chen@windriver.com>
>
> This is a small version bump. It includes to following two
> commits to fix CVE-2025-4565.
>
>    05ba1a810 Add recursion depth limits to pure python
>    1ef3f01c4 Internal pure python fixes
>
> Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
> Signed-off-by: Khem Raj <raj.khem@gmail.com>
> ---
>   .../protobuf/{protobuf_5.29.4.bb => protobuf_5.29.5.bb}         | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
>   rename meta-oe/recipes-devtools/protobuf/{protobuf_5.29.4.bb => protobuf_5.29.5.bb} (99%)
>
> diff --git a/meta-oe/recipes-devtools/protobuf/protobuf_5.29.4.bb b/meta-oe/recipes-devtools/protobuf/protobuf_5.29.5.bb
> similarity index 99%
> rename from meta-oe/recipes-devtools/protobuf/protobuf_5.29.4.bb
> rename to meta-oe/recipes-devtools/protobuf/protobuf_5.29.5.bb
> index 30b805e6b1..88a979d0af 100644
> --- a/meta-oe/recipes-devtools/protobuf/protobuf_5.29.4.bb
> +++ b/meta-oe/recipes-devtools/protobuf/protobuf_5.29.5.bb
> @@ -14,7 +14,7 @@ LIC_FILES_CHKSUM = " \
>   DEPENDS = "zlib abseil-cpp jsoncpp"
>   DEPENDS:append:class-target = " protobuf-native"
>   
> -SRCREV = "1be1c9d0ea6efa2a25bd7b76186844d1669be78a"
> +SRCREV = "f5de0a0495faa63b4186fc767324f8b9a7bf4fc4"
>   
>   SRC_URI = "git://github.com/protocolbuffers/protobuf.git;branch=29.x;protocol=https \
>              file://run-ptest \
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#118887): https://lists.openembedded.org/g/openembedded-devel/message/118887
> Mute This Topic: https://lists.openembedded.org/mt/114562670/7304865
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [Qi.Chen@eng.windriver.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>

Re: [oe][meta-python][walnascar][PATCH 2/2] python3-protobuf: upgrade from 5.29.4 to 5.29.5

[ChenQi]

ping

On 8/6/25 16:13, Chen Qi via lists.openembedded.org wrote:
> From: Chen Qi <Qi.Chen@windriver.com>
>
> protobuf is upgraded from 5.29.4 to 5.29.5. Upgrade python3-protobuf
> to sync.
>
> Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
> Signed-off-by: Khem Raj <raj.khem@gmail.com>
> ---
>   .../{python3-protobuf_5.29.4.bb => python3-protobuf_5.29.5.bb}  | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
>   rename meta-python/recipes-devtools/python/{python3-protobuf_5.29.4.bb => python3-protobuf_5.29.5.bb} (95%)
>
> diff --git a/meta-python/recipes-devtools/python/python3-protobuf_5.29.4.bb b/meta-python/recipes-devtools/python/python3-protobuf_5.29.5.bb
> similarity index 95%
> rename from meta-python/recipes-devtools/python/python3-protobuf_5.29.4.bb
> rename to meta-python/recipes-devtools/python/python3-protobuf_5.29.5.bb
> index d39c5e9790..14ab3237b9 100644
> --- a/meta-python/recipes-devtools/python/python3-protobuf_5.29.4.bb
> +++ b/meta-python/recipes-devtools/python/python3-protobuf_5.29.5.bb
> @@ -10,7 +10,7 @@ LIC_FILES_CHKSUM = " \
>   "
>   
>   inherit pypi setuptools3
> -SRC_URI[sha256sum] = "4f1dfcd7997b31ef8f53ec82781ff434a28bf71d9102ddde14d076adcfc78c99"
> +SRC_URI[sha256sum] = "bc1463bafd4b0929216c35f437a8e28731a2b7fe3d98bb77a600efced5a15c84"
>   
>   CVE_PRODUCT += "google:protobuf protobuf:protobuf google-protobuf protobuf-python"
>   
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#118888): https://lists.openembedded.org/g/openembedded-devel/message/118888
> Mute This Topic: https://lists.openembedded.org/mt/114562671/7304865
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [Qi.Chen@eng.windriver.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>