[PATCH 0/4] Package upgrades: freetype, tzdata, ethtool, menu-cache

[PATCH 0/4] Package upgrades: freetype, tzdata, ethtool, menu-cache

[Laurentiu Palcu]

Tests done:
	- packages compile fine on all architectures;
	- basic functionality:
		* ethtool - ran ethtool directly;
		* menu-cache - ran pcmanfm;
		* tzdata - it's just a database;
		* freetype - ran matchbox-keyboard;

Laurentiu Palcu (4):
  freetype: upgrade to 2.4.9
  tzdata: upgrade to 2012c
  ethtool: upgrade to 3.2
  menu-cache: upgrade to 0.3.3

 meta/recipes-extended/ethtool/ethtool_2.6.36.bb    |   15 ---------------
 meta/recipes-extended/ethtool/ethtool_3.2.bb       |   15 +++++++++++++++
 .../tzdata/{tzdata_2012b.bb => tzdata_2012c.bb}    |    6 +++---
 .../no-hardcode.patch                              |    0
 .../{freetype_2.4.8.bb => freetype_2.4.9.bb}       |    4 ++--
 .../{menu-cache_0.3.2.bb => menu-cache_0.3.3.bb}   |    8 ++++----
 6 files changed, 24 insertions(+), 24 deletions(-)
 delete mode 100644 meta/recipes-extended/ethtool/ethtool_2.6.36.bb
 create mode 100644 meta/recipes-extended/ethtool/ethtool_3.2.bb
 rename meta/recipes-extended/tzdata/{tzdata_2012b.bb => tzdata_2012c.bb} (97%)
 rename meta/recipes-graphics/freetype/{freetype-2.4.8 => freetype-2.4.9}/no-hardcode.patch (100%)
 rename meta/recipes-graphics/freetype/{freetype_2.4.8.bb => freetype_2.4.9.bb} (91%)
 rename meta/recipes-graphics/menu-cache/{menu-cache_0.3.2.bb => menu-cache_0.3.3.bb} (76%)

-- 
1.7.9.5

[PATCH 1/4] freetype: upgrade to 2.4.9

[Laurentiu Palcu]

Signed-off-by: Laurentiu Palcu <laurentiu.palcu@intel.com>
---
 .../no-hardcode.patch                              |    0
 .../{freetype_2.4.8.bb => freetype_2.4.9.bb}       |    4 ++--
 2 files changed, 2 insertions(+), 2 deletions(-)
 rename meta/recipes-graphics/freetype/{freetype-2.4.8 => freetype-2.4.9}/no-hardcode.patch (100%)
 rename meta/recipes-graphics/freetype/{freetype_2.4.8.bb => freetype_2.4.9.bb} (91%)

diff --git a/meta/recipes-graphics/freetype/freetype-2.4.8/no-hardcode.patch b/meta/recipes-graphics/freetype/freetype-2.4.9/no-hardcode.patch
similarity index 100%
rename from meta/recipes-graphics/freetype/freetype-2.4.8/no-hardcode.patch
rename to meta/recipes-graphics/freetype/freetype-2.4.9/no-hardcode.patch
diff --git a/meta/recipes-graphics/freetype/freetype_2.4.8.bb b/meta/recipes-graphics/freetype/freetype_2.4.9.bb
similarity index 91%
rename from meta/recipes-graphics/freetype/freetype_2.4.8.bb
rename to meta/recipes-graphics/freetype/freetype_2.4.9.bb
index bce01cf..31bee80 100644
--- a/meta/recipes-graphics/freetype/freetype_2.4.8.bb
+++ b/meta/recipes-graphics/freetype/freetype_2.4.9.bb
@@ -18,8 +18,8 @@ PR = "r0"
 SRC_URI = "${SOURCEFORGE_MIRROR}/freetype/freetype-${PV}.tar.bz2 \
            file://no-hardcode.patch"
 
-SRC_URI[md5sum] = "dbf2caca1d3afd410a29217a9809d397"
-SRC_URI[sha256sum] = "a9eb7da3875fcb2f022a9c280c01b94ae45ac83d8102838c05dce1277948fb71"
+SRC_URI[md5sum] = "77a893dae81fd5b896632715ca041179"
+SRC_URI[sha256sum] = "c4204ac1d48e99d4375a2f32bf4f3f92780a9d9f015e64e57e852f6c004859b9"
 
 S = "${WORKDIR}/freetype-${PV}"
 
-- 
1.7.9.5

Re: [PATCH 1/4] freetype: upgrade to 2.4.9

[Scott Garman]

On 06/08/2012 07:48 AM, Laurentiu Palcu wrote:
> Signed-off-by: Laurentiu Palcu<laurentiu.palcu@intel.com>

Hi Laurentiu,

Since this commit fixes a bug and addresses security issues, please be 
sure to include these details in the future in your commit log. 
Something along the lines of:

Addresses CVE-2012-1126, CVE-2012-1127, CVE-2012-1128, ...

This fixes [YOCTO #2468]

helps us track security-related fixes and bugfixes more easily.

Note, in this case the number of CVEs this fixes is unusually long (I 
count 19 of them), but listing all of them is good policy.

Thanks,

Scott

> ---
>   .../no-hardcode.patch                              |    0
>   .../{freetype_2.4.8.bb =>  freetype_2.4.9.bb}       |    4 ++--
>   2 files changed, 2 insertions(+), 2 deletions(-)
>   rename meta/recipes-graphics/freetype/{freetype-2.4.8 =>  freetype-2.4.9}/no-hardcode.patch (100%)
>   rename meta/recipes-graphics/freetype/{freetype_2.4.8.bb =>  freetype_2.4.9.bb} (91%)
>
> diff --git a/meta/recipes-graphics/freetype/freetype-2.4.8/no-hardcode.patch b/meta/recipes-graphics/freetype/freetype-2.4.9/no-hardcode.patch
> similarity index 100%
> rename from meta/recipes-graphics/freetype/freetype-2.4.8/no-hardcode.patch
> rename to meta/recipes-graphics/freetype/freetype-2.4.9/no-hardcode.patch
> diff --git a/meta/recipes-graphics/freetype/freetype_2.4.8.bb b/meta/recipes-graphics/freetype/freetype_2.4.9.bb
> similarity index 91%
> rename from meta/recipes-graphics/freetype/freetype_2.4.8.bb
> rename to meta/recipes-graphics/freetype/freetype_2.4.9.bb
> index bce01cf..31bee80 100644
> --- a/meta/recipes-graphics/freetype/freetype_2.4.8.bb
> +++ b/meta/recipes-graphics/freetype/freetype_2.4.9.bb
> @@ -18,8 +18,8 @@ PR = "r0"
>   SRC_URI = "${SOURCEFORGE_MIRROR}/freetype/freetype-${PV}.tar.bz2 \
>              file://no-hardcode.patch"
>
> -SRC_URI[md5sum] = "dbf2caca1d3afd410a29217a9809d397"
> -SRC_URI[sha256sum] = "a9eb7da3875fcb2f022a9c280c01b94ae45ac83d8102838c05dce1277948fb71"
> +SRC_URI[md5sum] = "77a893dae81fd5b896632715ca041179"
> +SRC_URI[sha256sum] = "c4204ac1d48e99d4375a2f32bf4f3f92780a9d9f015e64e57e852f6c004859b9"
>
>   S = "${WORKDIR}/freetype-${PV}"
>


-- 
Scott Garman
Embedded Linux Engineer - Yocto Project
Intel Open Source Technology Center

[PATCH 2/4] tzdata: upgrade to 2012c

[Laurentiu Palcu]

Other changes:
	- the licence header shifted one line down, hence the start/end lines
	  used to compute the MD5 sum were incremented by 1;

Signed-off-by: Laurentiu Palcu <laurentiu.palcu@intel.com>
---
 .../tzdata/{tzdata_2012b.bb => tzdata_2012c.bb}    |    6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)
 rename meta/recipes-extended/tzdata/{tzdata_2012b.bb => tzdata_2012c.bb} (97%)

diff --git a/meta/recipes-extended/tzdata/tzdata_2012b.bb b/meta/recipes-extended/tzdata/tzdata_2012c.bb
similarity index 97%
rename from meta/recipes-extended/tzdata/tzdata_2012b.bb
rename to meta/recipes-extended/tzdata/tzdata_2012c.bb
index 7cb1c23..fab8e01 100644
--- a/meta/recipes-extended/tzdata/tzdata_2012b.bb
+++ b/meta/recipes-extended/tzdata/tzdata_2012c.bb
@@ -2,7 +2,7 @@ DESCRIPTION = "Timezone data"
 HOMEPAGE = "ftp://elsie.nci.nih.gov/pub/"
 SECTION = "base"
 LICENSE = "PD"
-LIC_FILES_CHKSUM = "file://asia;beginline=2;endline=3;md5=06468c0e84ef4d4c97045a4a29b08234"
+LIC_FILES_CHKSUM = "file://asia;beginline=3;endline=4;md5=06468c0e84ef4d4c97045a4a29b08234"
 DEPENDS = "tzcode-native"
 
 PR = "r0"
@@ -14,8 +14,8 @@ RCONFLICTS= "timezones timezone-africa timezone-america timezone-antarctica \
 
 SRC_URI = "ftp://ftp.iana.org/tz/releases/tzdata${PV}.tar.gz;name=tzdata"
 
-SRC_URI[tzdata.md5sum] = "0615fd29def380a917e528433c820368"
-SRC_URI[tzdata.sha256sum] = "2f9f8e2d1ae087be5917f60c3946e8dc3fe1068d7738c3395f2125135309e745"
+SRC_URI[tzdata.md5sum] = "cfdc2710bd05c26dbd624441d57028f6"
+SRC_URI[tzdata.sha256sum] = "33e19e1dd27bda5239812587d72971509a15b59baff7abd692b77ff66f168a82"
 
 S = "${WORKDIR}"
 
-- 
1.7.9.5

[PATCH 3/4] ethtool: upgrade to 3.2

[Laurentiu Palcu]

Other changes:
	- the HOMEPAGE URL since project hosting chenged to kernel.org;
	- licence MD5 for ethtool.c has changed because a new copyright
	  line from Sun has been added: "Portions Copyright (C) Sun
	  Microsystems 2008"

Signed-off-by: Laurentiu Palcu <laurentiu.palcu@intel.com>
---
 meta/recipes-extended/ethtool/ethtool_2.6.36.bb |   15 ---------------
 meta/recipes-extended/ethtool/ethtool_3.2.bb    |   15 +++++++++++++++
 2 files changed, 15 insertions(+), 15 deletions(-)
 delete mode 100644 meta/recipes-extended/ethtool/ethtool_2.6.36.bb
 create mode 100644 meta/recipes-extended/ethtool/ethtool_3.2.bb

diff --git a/meta/recipes-extended/ethtool/ethtool_2.6.36.bb b/meta/recipes-extended/ethtool/ethtool_2.6.36.bb
deleted file mode 100644
index 5824ce0..0000000
--- a/meta/recipes-extended/ethtool/ethtool_2.6.36.bb
+++ /dev/null
@@ -1,15 +0,0 @@
-SUMMARY = "Display or change ethernet card settings"
-DESCRIPTION = "A small utility for examining and tuning the settings of your ethernet-based network interfaces."
-HOMEPAGE = "http://sourceforge.net/projects/gkernel/"
-SECTION = "console/network"
-LICENSE = "GPLv2+"
-LIC_FILES_CHKSUM = "file://COPYING;md5=94d55d512a9ba36caa9b7df079bae19f \
-                    file://ethtool.c;firstline=4;endline=16;md5=6db6b005b8390ea76cb85a2c7bda8e6b"
-PR = "r0"
-
-SRC_URI = "${SOURCEFORGE_MIRROR}/gkernel/ethtool-${PV}.tar.gz"
-
-SRC_URI[md5sum] = "3b2322695e9ee7bf447ebcdb85f93e83"
-SRC_URI[sha256sum] = "639622180fe48dc7bb117ffbf263395d7ae47aac9819b8d9f83ff053ecf17bdd"
-
-inherit autotools
diff --git a/meta/recipes-extended/ethtool/ethtool_3.2.bb b/meta/recipes-extended/ethtool/ethtool_3.2.bb
new file mode 100644
index 0000000..31163d6
--- /dev/null
+++ b/meta/recipes-extended/ethtool/ethtool_3.2.bb
@@ -0,0 +1,15 @@
+SUMMARY = "Display or change ethernet card settings"
+DESCRIPTION = "A small utility for examining and tuning the settings of your ethernet-based network interfaces."
+HOMEPAGE = "http://www.kernel.org/pub/software/network/ethtool/"
+SECTION = "console/network"
+LICENSE = "GPLv2+"
+LIC_FILES_CHKSUM = "file://COPYING;md5=94d55d512a9ba36caa9b7df079bae19f \
+                    file://ethtool.c;firstline=4;endline=17;md5=594311a6703a653a992f367bd654f7c1"
+PR = "r0"
+
+SRC_URI = "${KERNELORG_MIRROR}/software/network/ethtool/ethtool-${PV}.tar.gz"
+
+SRC_URI[md5sum] = "1c5ee419d4278569db1fca46981918a4"
+SRC_URI[sha256sum] = "c075ed390dddc99dfb4804f220214cb5e8eb7c0882694a36b05f6aaa883629d7"
+
+inherit autotools
-- 
1.7.9.5

[PATCH 4/4] menu-cache: upgrade to 0.3.3

[Laurentiu Palcu]

Other changes:
	- licence MD5 for menu-cache.h has changed because some whitespaces
	  were removed;

Signed-off-by: Laurentiu Palcu <laurentiu.palcu@intel.com>
---
 .../{menu-cache_0.3.2.bb => menu-cache_0.3.3.bb}   |    8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)
 rename meta/recipes-graphics/menu-cache/{menu-cache_0.3.2.bb => menu-cache_0.3.3.bb} (76%)

diff --git a/meta/recipes-graphics/menu-cache/menu-cache_0.3.2.bb b/meta/recipes-graphics/menu-cache/menu-cache_0.3.3.bb
similarity index 76%
rename from meta/recipes-graphics/menu-cache/menu-cache_0.3.2.bb
rename to meta/recipes-graphics/menu-cache/menu-cache_0.3.3.bb
index b8f9d97..894da48 100644
--- a/meta/recipes-graphics/menu-cache/menu-cache_0.3.2.bb
+++ b/meta/recipes-graphics/menu-cache/menu-cache_0.3.3.bb
@@ -5,7 +5,7 @@ BUGTRACKER = ""
 
 LICENSE = "GPLv2 & GPLv2+"
 LIC_FILES_CHKSUM = "file://COPYING;md5=94d55d512a9ba36caa9b7df079bae19f \
-                    file://libmenu-cache/menu-cache.h;endline=29;md5=ca0101a419b3584963e0c45f2b6b55ef \
+                    file://libmenu-cache/menu-cache.h;endline=29;md5=21625ca49a07e7c381027c63eff769dc \
                     file://menu-cache-daemon/menu-cached.c;endline=22;md5=fcecb7d315c57ef804103fa9cdab7111"
 
 SECTION = "x11/libs"
@@ -13,9 +13,9 @@ DEPENDS = "glib-2.0 zlib"
 
 SRC_URI = "${SOURCEFORGE_MIRROR}/lxde/menu-cache-${PV}.tar.gz"
 
-SRC_URI[md5sum] = "ac4a9ea77db68d3db3f9f53cc75af66a"
-SRC_URI[sha256sum] = "6b7c1627b5102d8301a8a3e845f673a7181a71dde32f6455abf22d03e392b89f"
+SRC_URI[md5sum] = "a14b0b162cd64d56c16bf6af16f3a47f"
+SRC_URI[sha256sum] = "07241c1f5f371b426d3b0a6e571a86184ec6256bdd7ead7a4da866cd10f25955"
 
-PR = "r2"
+PR = "r0"
 
 inherit autotools pkgconfig
-- 
1.7.9.5

Re: [PATCH 0/4] Package upgrades: freetype, tzdata, ethtool, menu-cache

[Richard Purdie]

On Fri, 2012-06-08 at 17:48 +0300, Laurentiu Palcu wrote:
> Tests done:
> 	- packages compile fine on all architectures;
> 	- basic functionality:
> 		* ethtool - ran ethtool directly;
> 		* menu-cache - ran pcmanfm;
> 		* tzdata - it's just a database;
> 		* freetype - ran matchbox-keyboard;
> 
> Laurentiu Palcu (4):
>   freetype: upgrade to 2.4.9
>   tzdata: upgrade to 2012c
>   ethtool: upgrade to 3.2
>   menu-cache: upgrade to 0.3.3

Merged to master, thanks.

Richard