Re: [RFC] Remove older freetype versions

[Tom Rini <tom_rini@mentor.com>]

Philip Balister wrote:
> On 10/12/2010 12:41 PM, Koen Kooi wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> On 12-10-10 18:26, Tom Rini wrote:
>>> Hey all,
>>>
>>> I'd like to remove all versions of freetype before 2.4.3.  The only dist
>>> which is pinning freetype currently does so via
>>> conf/distro/include/preferred-opie-versions.inc and that pins to a
>>> non-existent version (it's using OPIE_VERSION which seems wrong).  All
>>> of the previous versions have various security issues, including
>>> remotely exploitable ones.  Only the very oldest version we have as a
>>> D_P -1 so everyone was using 2.3.12 and will be going up to 2.4.3
>>> (libraries are compat).
>>
>> Speaking of freetype, the bytecode patent expired, so we can turn that
>> on and get nicer text :)
>>
>> And removing older freetypes is a good idea
> 
> I'd like to point people at openwmbedded/removal.txt. This would be a 
> good place to schedule things for deletion. As in I added a new version 
> and made it active, but do not want to delete the older version for a 
> couple of months just in case something crops up. So leave a note in 
> removal.txt to look are removing a recipe on a certain date.

In general, good idea.  But we've been doing things a lot quicker more 
recently.  And I'd like to not wait for a long time for security related 
items.

-- 
Tom Rini
Mentor Graphics Corporation