openKylin protobuf package

Change log for protobuf package in openKylin

1 → 8 of 8 results First • Previous • Next • Last
Published in huanghe-release
Published in huanghe-proposed 
protobuf (3.21.12-ok4) huanghe; urgency=medium

  * fix build fail.

 -- liubo01 <email address hidden>  Thu, 24 Sep 2026 17:14:41 +0800
Superseded in huanghe-proposed 
protobuf (3.21.12-ok3) huanghe; urgency=high

  * Security update. Backport the fixes from Debian 3.21.12-11, -12, -14
    and Ubuntu 3.21.12-15ubuntu1. They are applied directly to the source
    tree to stay in line with this package's "3.0 (native)" source format.

  * CVE-2024-7254 (Java Full/Lite): parsing the unknown fields of a crafted
    message could recurse without bound and crash the process with a
    StackOverflowError. Add a recursion depth counter and a limit
    (DEFAULT_RECURSION_LIMIT = 100) in ArrayDecoders, MessageSchema,
    MessageSetSchema, UnknownFieldSchema and CodedInputStream.

  * CVE-2025-4565 (pure Python): data containing an arbitrary number of
    recursive groups, recursive messages or a series of SGROUP tags could
    exceed the Python recursion limit and be mis-parsed. Track the recursion
    depth while decoding unknown fields and reject an unmatched end-group
    tag. Affects internal/decoder.py, internal/python_message.py and
    unknown_fields.py.

  * CVE-2026-0994 (pure Python): nested google.protobuf.Any messages could
    bypass the max_recursion_depth limit of
    google.protobuf.json_format.ParseDict(), leading to a denial of service
    via stack overflow. Route well-known type conversion through
    ConvertMessage() so that the recursion depth is accounted for.

  * Add loongarch64 support (GOOGLE_PROTOBUF_ARCH_LOONGARCH64) to
    src/google/protobuf/stubs/platform_macros.h.

  * src/google/protobuf/port_def.inc: enable PROTOBUF_MUSTTAIL only on the
    primary target platforms (aarch64, x86_64), which fixes build failures
    on other architectures (upstream issue #22367).

  * Add regression tests: CodedInputStreamTest, LiteTest, the map and
    map_lite test protos, internal/message_test and internal/json_format_test.

 -- Openkylin Developers <email address hidden>  Thu, 24 Sep 2026 16:40:31 +0800

Available diffs

Superseded in huanghe-release
Published in nile.bedrock-release 
protobuf (3.21.12-ok2) nile; urgency=medium

  * Add -fPIC for building triton.

 -- liwenjun <email address hidden>  Thu, 29 May 2025 14:41:17 +0800
Deleted in nile.bedrock-proposed (Reason: del)
Deleted in nile.bedrock-release (Reason: del)
Superseded in huanghe-proposed
Superseded in huanghe-release
Published in nile-release
Published in nile-proposed 
protobuf (3.21.12-ok1) nile; urgency=medium

  * Fix build error: change debian/java-build.xml javac version from 1.7 to
    1.8.

 -- liyang <email address hidden>  Thu, 16 May 2024 16:08:56 +0800
Superseded in nile-proposed 
protobuf (3.21.12-8.2build1) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <email address hidden>  Sun, 31 Mar 2024 06:49:33 +0000
Superseded in nile-release
Published in yangtze-release
Superseded in nile-proposed 
protobuf (3.6.1.3-ok1.2) nile; urgency=medium

  * fix python3 build.

 -- rtlhq <nobelxyz@163.com>  Sat, 14 Oct 2023 14:37:46 +0800
Superseded in nile-proposed 
protobuf (3.6.1.3-ok1.1) nile; urgency=medium

  * SECURITY UPDATE: heap-based buffer overflow issue
  - CVE-2021-22569.
  - CVE-2021-22570.
  - CVE-2022-1941.

 -- rtlhq <nobelxyz@163.com>  Sat, 02 Sep 2023 18:10:25 +0800
Superseded in nile-release
Superseded in yangtze-release 
protobuf (3.6.1.3-ok1) yangtze; urgency=medium

  * Build for openKylin.

 -- openKylinBot <email address hidden>  Mon, 25 Apr 2022 22:03:04 +0800
1 → 8 of 8 results First • Previous • Next • Last