[OE-core] [PATCH] ethtool: Switch to download mirror

Paul Barker pbarker at toganlabs.com
Mon Apr 10 09:12:20 UTC 2017


On Mon, 3 Apr 2017 09:57:15 +0100
"Burton, Ross" <ross.burton at intel.com> wrote:

> On 2 April 2017 at 22:31, Paul Barker <pbarker at toganlabs.com> wrote:
> 
> > The md5sum & sha256sum for ethtool-4.8.tar.gz have changed upstream :(
> >  
> 
> Have you verified with upstream that they haven't been compromised?
> 
> Ross

Now verified with upstream:

On Wed, 5 Apr 2017 10:00:04 -0400
"John W. Linville" <linville at tuxdriver.com> wrote:

> Yes, the .tar.gz file got regenerated locally as I was tinkering with
> the release scripts that I inherited from the former ethtool maintainer,
> and the regenerated .tar.gz file got uploaded. The newly updated one
> is properly signed and the signature is there to verify. (Note that
> the signature is against the .tar file and not the .tar.gz file.)

Looks like this has already been merged to master anyway but good to
have that confirmation.

Cheers,
Paul



More information about the Openembedded-core mailing list