[Buildroot] [PATCH v2 1/5] package/xz: bump version to 5.4.7

[Arnout Vandecappelle]

On 12/06/2024 15:57, Peter Seiderer via buildroot wrote:
> - add key hint for download signature check
> - update COPYING hash due to [1] (change of home page URL)
> 
> For details see [2].

  I've added a statement here to make clear this is not affected by the backdoor.

  Peter, this is for 2024.02.x and 2024.05.x.


> [1] https://github.com/tukaani-project/xz/commit/c5c091332c6953a0ce940cb355ea9e99491429fc
> 
> [2] https://github.com/tukaani-project/xz/releases/tag/v5.4.7
> 
> Signed-off-by: Peter Seiderer <ps.report at gmx.net>

  Applied to master, thanks.

  Regards,
  Arnout

> ---
> Changelog v1 -> v2:
>    - new patch, bump old stable version
> ---
>   package/xz/xz.hash | 8 +++++---
>   package/xz/xz.mk   | 2 +-
>   2 files changed, 6 insertions(+), 4 deletions(-)
> 
> diff --git a/package/xz/xz.hash b/package/xz/xz.hash
> index e8025a8065..ff070f6775 100644
> --- a/package/xz/xz.hash
> +++ b/package/xz/xz.hash
> @@ -1,9 +1,11 @@
>   # Locally calculated after checking pgp signature
> -# https://github.com/tukaani-project/xz/releases/download/v5.4.6/xz-5.4.6.tar.bz2.sig
> -sha256  913851b274e8e1d31781ec949f1c23e8dbcf0ecf6e73a2436dc21769dd3e6f49  xz-5.4.6.tar.bz2
> +# https://github.com/tukaani-project/xz/releases/download/v5.4.7/xz-5.4.7.tar.bz2.sig
> +# using key 3690C240CE51B4670D30AD1C38EE757D69184620 Lasse Collin <lasse.collin at tukaani.org>
> +
> +sha256  9976ed9cd0764e962d852d7d519ee1c3a7f87aca3b86e5d021a45650ba3ecb41  xz-5.4.7.tar.bz2
>   
>   # Hash for license files
> -sha256  29a1e305b2e34eefe5d4602d00cde1d528b71c5d9f2eec5106972cf6ddb6f73f  COPYING
> +sha256  72d7ef9c98be319fd34ce88b45203b36d5936f9c49e82bf3198ffee5e0c7d87e  COPYING
>   sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING.GPLv2
>   sha256  3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986  COPYING.GPLv3
>   sha256  dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551  COPYING.LGPLv2.1
> diff --git a/package/xz/xz.mk b/package/xz/xz.mk
> index 40fa59ca7c..d5dceb0eae 100644
> --- a/package/xz/xz.mk
> +++ b/package/xz/xz.mk
> @@ -4,7 +4,7 @@
>   #
>   ################################################################################
>   
> -XZ_VERSION = 5.4.6
> +XZ_VERSION = 5.4.7
>   XZ_SOURCE = xz-$(XZ_VERSION).tar.bz2
>   XZ_SITE = https://github.com/tukaani-project/xz/releases/download/v$(XZ_VERSION)
>   XZ_INSTALL_STAGING = YES