diff mbox series

[1/1] package/lzip: bump to version 1.25

Message ID 20250121091917.19379-1-nemaakhilesh@gmail.com
State Accepted
Delegated to: Julien Olivain
Headers show
Series [1/1] package/lzip: bump to version 1.25 | expand

Commit Message

Akhilesh Nema Jan. 21, 2025, 9:19 a.m. UTC
Release notes:
https://lists.nongnu.org/archive/html/lzip-bug/2025-01/msg00012.html

Signed-off-by: Akhilesh Nema <nemaakhilesh@gmail.com>
---
 package/lzip/lzip.hash | 4 ++--
 package/lzip/lzip.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

Comments

Julien Olivain Jan. 24, 2025, 8:10 p.m. UTC | #1
Hi Akhilesh,

Thanks for the patch.

On 21/01/2025 10:19, Akhilesh Nema wrote:
> Release notes:
> https://lists.nongnu.org/archive/html/lzip-bug/2025-01/msg00012.html
> 
> Signed-off-by: Akhilesh Nema <nemaakhilesh@gmail.com>
> ---
>  package/lzip/lzip.hash | 4 ++--
>  package/lzip/lzip.mk   | 2 +-
>  2 files changed, 3 insertions(+), 3 deletions(-)
> 
> diff --git a/package/lzip/lzip.hash b/package/lzip/lzip.hash
> index 7900835e11..ffa70c3e6c 100644
> --- a/package/lzip/lzip.hash
> +++ b/package/lzip/lzip.hash
> @@ -1,4 +1,4 @@
> -# From 
> https://lists.nongnu.org/archive/html/lzip-bug/2024-03/msg00003.html
> -sha256  
> 30c9cb6a0605f479c496c376eb629a48b0a1696d167e3c1e090c5defa481b162  
> lzip-1.24.1.tar.gz
> +# From 
> https://lists.nongnu.org/archive/html/lzip-bug/2025-01/msg00012.html
> +sha256  
> 09418a6d8fb83f5113f5bd856e09703df5d37bae0308c668d0f346e3d3f0a56f  
> lzip-1.25.tar.gz
>  # Locally calculated
>  sha256  
> 3d77c1a58fbde5ddba612d1fe09965e20a3804953eca12e8c1892298bb8a5eef  
> COPYING

Running "make lzip-legal-info" fails with output:

     >>> lzip 1.25 Collecting legal info
     ERROR: while checking hashes from package/lzip/lzip.hash
     ERROR: COPYING has wrong sha256 hash:
     ERROR: expected: 
3d77c1a58fbde5ddba612d1fe09965e20a3804953eca12e8c1892298bb8a5eef
     ERROR: got     : 
022e9c2e9cc1aac3622313df6f971fbb39c1d1b0cb45324c16b8a1fe231c5ea6
     ERROR: Incomplete download, or man-in-the-middle (MITM) attack

Could you check what has changed in the license (you can provide a link 
to the
upstream commit change, or describe the change) and send an updated 
version of
this patch?

Best regards,

Julien.
diff mbox series

Patch

diff --git a/package/lzip/lzip.hash b/package/lzip/lzip.hash
index 7900835e11..ffa70c3e6c 100644
--- a/package/lzip/lzip.hash
+++ b/package/lzip/lzip.hash
@@ -1,4 +1,4 @@ 
-# From https://lists.nongnu.org/archive/html/lzip-bug/2024-03/msg00003.html
-sha256  30c9cb6a0605f479c496c376eb629a48b0a1696d167e3c1e090c5defa481b162  lzip-1.24.1.tar.gz
+# From https://lists.nongnu.org/archive/html/lzip-bug/2025-01/msg00012.html
+sha256  09418a6d8fb83f5113f5bd856e09703df5d37bae0308c668d0f346e3d3f0a56f  lzip-1.25.tar.gz
 # Locally calculated
 sha256  3d77c1a58fbde5ddba612d1fe09965e20a3804953eca12e8c1892298bb8a5eef  COPYING
diff --git a/package/lzip/lzip.mk b/package/lzip/lzip.mk
index c88be5680e..9c8c54a8b1 100644
--- a/package/lzip/lzip.mk
+++ b/package/lzip/lzip.mk
@@ -4,7 +4,7 @@ 
 #
 ################################################################################
 
-LZIP_VERSION = 1.24.1
+LZIP_VERSION = 1.25
 LZIP_SITE = http://download.savannah.gnu.org/releases/lzip
 LZIP_LICENSE = GPL-2.0+
 LZIP_LICENSE_FILES = COPYING