diff mbox

mosquitto: specify that hash is taken from upstream

Message ID 20170628105553.32339-1-Vincent.Riera@imgtec.com
State Accepted
Headers show

Commit Message

Vicente Olivert Riera June 28, 2017, 10:55 a.m. UTC 
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
---
 package/mosquitto/mosquitto.hash | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comments

Thomas Petazzoni July 1, 2017, 3:45 p.m. UTC | #1 
Hello,

On Wed, 28 Jun 2017 11:55:53 +0100, Vicente Olivert Riera wrote:
> Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
> ---
>  package/mosquitto/mosquitto.hash | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)

Applied to master, thanks.

Thomas
Peter Korsgaard July 2, 2017, 11:43 a.m. UTC | #2 
>>>>> "Thomas" == Thomas Petazzoni <thomas.petazzoni@free-electrons.com> writes:

 > Hello,
 > On Wed, 28 Jun 2017 11:55:53 +0100, Vicente Olivert Riera wrote:
 >> Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
 >> ---
 >> package/mosquitto/mosquitto.hash | 2 +-
 >> 1 file changed, 1 insertion(+), 1 deletion(-)

 > Applied to master, thanks.

This is not completely correct as the
mosquitto-1.4.x_cve-2017-9868.patch hash is locally computed. I'll push
a patch fixing that.
diff mbox

Patch

diff --git a/package/mosquitto/mosquitto.hash b/package/mosquitto/mosquitto.hash
index 6c102ebaa..3f766307d 100644
--- a/package/mosquitto/mosquitto.hash
+++ b/package/mosquitto/mosquitto.hash
@@ -1,2 +1,2 @@ 
-# Locally computed:
+# From http://www.eclipse.org/downloads/download.php?file=/mosquitto/source/mosquitto-1.4.12.tar.gz
 sha512  75e6105498869ab13265df7a0bea6052c014d59d0c0efb61162d8257d34c0153fce32130e84c28e99fd494f374949aac5e01c19f7439c2eea575b52ef1179c3c  mosquitto-1.4.12.tar.gz