package/xz: bump version to 5.4.7

- add key hint for download signature check
- update COPYING hash due to [1] (change of home page URL)

For details see [2].

This version was released after the backdoor, but never included the
backdoor code (it's from the older stable branch).

[1] c5c091332c

[2] https://github.com/tukaani-project/xz/releases/tag/v5.4.7

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
This commit is contained in:
Peter Seiderer
2024-06-12 15:57:23 +02:00
committed by Arnout Vandecappelle
parent 60fc945734
commit 40240ac30a
2 changed files with 6 additions and 4 deletions

View File

@@ -1,9 +1,11 @@
# Locally calculated after checking pgp signature
# https://github.com/tukaani-project/xz/releases/download/v5.4.6/xz-5.4.6.tar.bz2.sig
sha256 913851b274e8e1d31781ec949f1c23e8dbcf0ecf6e73a2436dc21769dd3e6f49 xz-5.4.6.tar.bz2
# https://github.com/tukaani-project/xz/releases/download/v5.4.7/xz-5.4.7.tar.bz2.sig
# using key 3690C240CE51B4670D30AD1C38EE757D69184620 Lasse Collin <lasse.collin@tukaani.org>
sha256 9976ed9cd0764e962d852d7d519ee1c3a7f87aca3b86e5d021a45650ba3ecb41 xz-5.4.7.tar.bz2
# Hash for license files
sha256 29a1e305b2e34eefe5d4602d00cde1d528b71c5d9f2eec5106972cf6ddb6f73f COPYING
sha256 72d7ef9c98be319fd34ce88b45203b36d5936f9c49e82bf3198ffee5e0c7d87e COPYING
sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING.GPLv2
sha256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986 COPYING.GPLv3
sha256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551 COPYING.LGPLv2.1

View File

@@ -4,7 +4,7 @@
#
################################################################################
XZ_VERSION = 5.4.6
XZ_VERSION = 5.4.7
XZ_SOURCE = xz-$(XZ_VERSION).tar.bz2
XZ_SITE = https://github.com/tukaani-project/xz/releases/download/v$(XZ_VERSION)
XZ_INSTALL_STAGING = YES