[oe] [RFC] Remove older freetype versions
Tom Rini
tom_rini at mentor.com
Tue Oct 12 17:03:17 UTC 2010
Philip Balister wrote:
> On 10/12/2010 12:41 PM, Koen Kooi wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> On 12-10-10 18:26, Tom Rini wrote:
>>> Hey all,
>>>
>>> I'd like to remove all versions of freetype before 2.4.3. The only dist
>>> which is pinning freetype currently does so via
>>> conf/distro/include/preferred-opie-versions.inc and that pins to a
>>> non-existent version (it's using OPIE_VERSION which seems wrong). All
>>> of the previous versions have various security issues, including
>>> remotely exploitable ones. Only the very oldest version we have as a
>>> D_P -1 so everyone was using 2.3.12 and will be going up to 2.4.3
>>> (libraries are compat).
>>
>> Speaking of freetype, the bytecode patent expired, so we can turn that
>> on and get nicer text :)
>>
>> And removing older freetypes is a good idea
>
> I'd like to point people at openwmbedded/removal.txt. This would be a
> good place to schedule things for deletion. As in I added a new version
> and made it active, but do not want to delete the older version for a
> couple of months just in case something crops up. So leave a note in
> removal.txt to look are removing a recipe on a certain date.
In general, good idea. But we've been doing things a lot quicker more
recently. And I'd like to not wait for a long time for security related
items.
--
Tom Rini
Mentor Graphics Corporation
More information about the Openembedded-devel
mailing list