Re: [blfs-dev] protobuf-33.0

"\"Douglas R. Reno\"" ([email protected] via blfs-support Mailing List) <[email protected]> Fri, 17 Oct 2025 15:08:32 -0500
Newsgroups gmane.linux.lfs.beyond.support
Message-ID <[email protected]>
On 10/17/25 3:06 PM, Bruce Dubbs ([email protected] via 
blfs-support Mailing List) wrote:
> On 10/17/25 2:44 PM, Rahul Chandra wrote:
>> On Fri, Oct 17, 2025 at 9:00 AM Bruce Dubbs
>> <[email protected]> wrote:
>>>
>>> I updated to protobuf-33.0 yesterday, but checking md5sums today I 
>>> found that
>>> upstream made a 'stealth' update.  That is, they changed the tarball 
>>> without changing
>>> the version number.
>>>
>>> One file was changed.
>>>
>>> I've updated the book, but it will not render until early tomorrow 
>>> morning.
>>>
>>> The updated md5sum is 936b48fdf816b0341c74ba73a42348c0. Nothing else 
>>> changed.
>>
>>
>> I can't seem to find the original file but if you still have it can
>> you extract and diff -Naur them, might just be my paranoia talking but
>> we don't want to end up with another xz scenario. If that's what you
>> meant by nothing else changed then ignore this message.
>
> I did do that, but I threw it away.  The changes added about 30 lines 
> of text to one file.  I deemed the changes not relevant from our point 
> of view.
>
>   -- Bruce
>
 From our point of view, they definitely aren't. Thank you for sharing 
the diff, Joe!

The update basically adds hashes for different files to the bazel 
configuration. Bazel is a build/test tool which is useful primarily for 
multi-language projects in my experience.

- Doug

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-support
Unsubscribe: See the above information page