Re: protobuf-33.0

"Bruce Dubbs" ([email protected] via blfs-dev Mailing List) <[email protected]>
Newsgroups gmane.linux.lfs.beyond.devel,gmane.linux.lfs.beyond.support
Message-ID <[email protected]>
On 10/17/25 2:44 PM, Rahul Chandra wrote:
> On Fri, Oct 17, 2025 at 9:00 AM Bruce Dubbs
> <[email protected]> wrote:
>>
>> I updated to protobuf-33.0 yesterday, but checking md5sums today I found that
>> upstream made a 'stealth' update.  That is, they changed the tarball without changing
>> the version number.
>>
>> One file was changed.
>>
>> I've updated the book, but it will not render until early tomorrow morning.
>>
>> The updated md5sum is 936b48fdf816b0341c74ba73a42348c0.  Nothing else changed.
> 
> 
> I can't seem to find the original file but if you still have it can
> you extract and diff -Naur them, might just be my paranoia talking but
> we don't want to end up with another xz scenario. If that's what you
> meant by nothing else changed then ignore this message.

I did do that, but I threw it away.  The changes added about 30 lines of text to one 
file.  I deemed the changes not relevant from our point of view.

   -- Bruce

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-dev
Unsubscribe: See the above information page
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.