Hello community,
here is the log from the commit of package fetchmsttfonts for openSUSE:Factory
checked in at 2015-12-16 17:42:24
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/fetchmsttfonts (Old)
and /work/SRC/openSUSE:Factory/.fetchmsttfonts.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "fetchmsttfonts"
Changes:
--------
--- /work/SRC/openSUSE:Factory/fetchmsttfonts/fetchmsttfonts.changes
2015-05-15 07:43:21.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.fetchmsttfonts.new/fetchmsttfonts.changes
2015-12-16 17:42:27.000000000 +0100
@@ -1,0 +2,8 @@
+Thu Dec 10 22:19:05 UTC 2015 - astie...@suse.com
+
+- verify md5 and sha1 checksums (sourced from upstream),
+ SHA-512 checksums (generated locally) boo#958651
+- no longer download the Andale file twice
+- update license text for new FSF address
+
+-------------------------------------------------------------------
New:
----
corefonts.md5
corefonts.sha1
corefonts.sha512
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ fetchmsttfonts.spec ++++++
--- /var/tmp/diff_new_pack.paL6kR/_old 2015-12-16 17:42:28.000000000 +0100
+++ /var/tmp/diff_new_pack.paL6kR/_new 2015-12-16 17:42:28.000000000 +0100
@@ -24,6 +24,9 @@
Release: 0
Source0: fetchmsttfonts.sh.in
Source1: COPYING
+Source2: corefonts.md5
+Source3: corefonts.sha1
+Source4: corefonts.sha512
#these stop the patch from pulling in the package
#Provides: pullin-msttf-fonts = 11.1
#Obsoletes: pullin-msttf-fonts <= 11.1
@@ -53,9 +56,17 @@
%prep
cp %{SOURCE0} .
cp %{SOURCE1} .
+cp %{SOURCE2} .
+cp %{SOURCE3} .
+cp %{SOURCE4} .
%build
-sed -e 's,__VERSION__,%version,' -e 's,__RELEASE__,%release,' -e
's,__NAME__,%name,' fetchmsttfonts.sh.in > fetchmsttfonts.sh
+sed \
+ -e 's,__VERSION__,%version,' \
+ -e 's,__RELEASE__,%release,' \
+ -e 's,__NAME__,%name,' \
+ -e 's,__DOCDIR__,%{_docdir},' \
+ fetchmsttfonts.sh.in > fetchmsttfonts.sh
%install
%suse_install_update_script fetchmsttfonts.sh
@@ -79,6 +90,7 @@
%files
%defattr(-, root, root)
%doc COPYING
+%doc corefonts.{md5,sha1,sha512}
/var/adm/update-scripts/*
%dir /usr/share/doc/corefonts
%dir /usr/share/fonts/truetype
++++++ COPYING ++++++
--- /var/tmp/diff_new_pack.paL6kR/_old 2015-12-16 17:42:28.000000000 +0100
+++ /var/tmp/diff_new_pack.paL6kR/_new 2015-12-16 17:42:28.000000000 +0100
@@ -1,12 +1,12 @@
- GNU GENERAL PUBLIC LICENSE
- Version 2, June 1991
+ GNU GENERAL PUBLIC LICENSE
+ Version 2, June 1991
- Copyright (C) 1989, 1991 Free Software Foundation, Inc.
- 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
+ Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
+ 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed.
- Preamble
+ Preamble
The licenses for most software are designed to take away your
freedom to share and change it. By contrast, the GNU General Public
@@ -15,7 +15,7 @@
General Public License applies to most of the Free Software
Foundation's software and to any other program whose authors commit to
using it. (Some other Free Software Foundation software is covered by
-the GNU Library General Public License instead.) You can apply it to
+the GNU Lesser General Public License instead.) You can apply it to
your programs, too.
When we speak of free software, we are referring to freedom, not
@@ -55,8 +55,8 @@
The precise terms and conditions for copying, distribution and
modification follow.
-
- GNU GENERAL PUBLIC LICENSE
+
+ GNU GENERAL PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. This License applies to any program or other work which contains
@@ -110,7 +110,7 @@
License. (Exception: if the Program itself is interactive but
does not normally print such an announcement, your work based on
the Program is not required to print an announcement.)
-
+
These requirements apply to the modified work as a whole. If
identifiable sections of that work are not derived from the Program,
and can be reasonably considered independent and separate works in
@@ -168,7 +168,7 @@
access to copy the source code from the same place counts as
distribution of the source code, even though third parties are not
compelled to copy the source along with the object code.
-
+
4. You may not copy, modify, sublicense, or distribute the Program
except as expressly provided under this License. Any attempt
otherwise to copy, modify, sublicense or distribute the Program is
@@ -225,7 +225,7 @@
This section is intended to make thoroughly clear what is believed to
be a consequence of the rest of this License.
-
+
8. If the distribution and/or use of the Program is restricted in
certain countries either by patents or by copyrighted interfaces, the
original copyright holder who places the Program under this License
@@ -255,7 +255,7 @@
of preserving the free status of all derivatives of our free software and
of promoting the sharing and reuse of software generally.
- NO WARRANTY
+ NO WARRANTY
11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN
@@ -277,9 +277,9 @@
PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.
- END OF TERMS AND CONDITIONS
-
- How to Apply These Terms to Your New Programs
+ END OF TERMS AND CONDITIONS
+
+ How to Apply These Terms to Your New Programs
If you develop a new program, and you want it to be of the greatest
possible use to the public, the best way to achieve this is to make it
@@ -291,7 +291,7 @@
the "copyright" line and a pointer to where the full notice is found.
<one line to give the program's name and a brief idea of what it does.>
- Copyright (C) 19yy <name of author>
+ Copyright (C) <year> <name of author>
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
@@ -303,17 +303,16 @@
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
-
+ You should have received a copy of the GNU General Public License along
+ with this program; if not, write to the Free Software Foundation, Inc.,
+ 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
Also add information on how to contact you by electronic and paper mail.
If the program is interactive, make it output a short notice like this
when it starts in an interactive mode:
- Gnomovision version 69, Copyright (C) 19yy name of author
+ Gnomovision version 69, Copyright (C) year name of author
Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
@@ -336,5 +335,5 @@
This General Public License does not permit incorporating your program into
proprietary programs. If your program is a subroutine library, you may
consider it more useful to permit linking proprietary applications with the
-library. If this is what you want to do, use the GNU Library General
+library. If this is what you want to do, use the GNU Lesser General
Public License instead of this License.
++++++ corefonts.md5 ++++++
230a1d13a365b22815f502eb24d9149b *webdin32.exe
12d2a75f8156e10607be1eaa8e8ef120 *verdan32.exe
0d7ea16cac6261f8513a061fbfcdb2b5 *trebuc32.exe
ed39c8ef91b9fb80f76f702568291bd5 *times32.exe
7907c7dd6684e9bade91cff82683d9d7 *impact32.exe
4d90016026e2da447593b41a8d8fa8bd *georgi32.exe
4e412c772294403ab62fb2d247d85c60 *courie32.exe
2b30de40bb5e803a0452c7715fc835d1 *comic32.exe
c9089ae0c3b3d0d8c4b0a95979bb9ff0 *arialb32.exe
9637df0e91703179f0723ec095a36cb5 *arial32.exe
cbdc2fdd7d2ed0832795e86a8b9ee19a *andale32.exe
++++++ corefonts.sha1 ++++++
2fb4a42c53e50bc70707a7b3c57baf62ba58398f *webdin32.exe
f5b93cedf500edc67502f116578123618c64a42a *verdan32.exe
50aab0988423efcc9cf21fac7d64d534d6d0a34a *trebuc32.exe
20b79e65cdef4e2d7195f84da202499e3aa83060 *times32.exe
86b34d650cfbbe5d3512d49d2545f7509a55aad2 *impact32.exe
90e4070cb356f1d811acb943080bf97e419a8f1e *georgi32.exe
06a745023c034f88b4135f5e294fece1a3c1b057 *courie32.exe
2371d0327683dcc5ec1684fe7c275a8de1ef9a51 *comic32.exe
d45cdab84b7f4c1efd6d1b369f50ed0390e3d344 *arialb32.exe
6d75f8436f39ab2da5c31ce651b7443b4ad2916e *arial32.exe
c4db8cbe42c566d12468f5fdad38c43721844c69 *andale32.exe
++++++ corefonts.sha512 ++++++
7099c389126d2af146ff082a840c77787f28e59cc8b5fd4147b9a45a34c649bc69ba6ec7c338703950389fce3ac3a7f118f503b7434c7ceb54c89d6210508bd4
*andale32.exe
299cb200f72f146fedfb2bb1895c36f5234aa5abd084e7c962ec7b14f087c1f582b51f5fdcb72e48b806ee02661c34766ca8a03bb0f2fadf662aaf46cc5f0e48
*arial32.exe
8a947764f2c725f2c506c12ca6f77142402174a0fadeeb72b211931136d82b541bb279b415d74032bc51b00efac9516e5cf68d8d4f172ff8549398ca28722c3a
*arialb32.exe
6ad11015d568d58f6e4375e04411dd702b5c4e454b82998b5044cd8352dae27fea1df6469a05067ccc8c14f4ba87ec99e8329c104551dde1eb48be8ce2b78708
*comic32.exe
7e2425d578dd626cc2b418efec72c53e35392c60610cf5e4a99c614fa86cb673167fbcc1691fe59b99bcd19e8f261321be9ea7e30fb84c80ce0a312fd47045c5
*courie32.exe
33e623179af8a418845fed64f7b176a1e721ee4e0ece29d3135d01b81be4238454dd4eb3d2166e8587bb7cced0c258a294eb55e637855f818deb28853f006ef4
*georgi32.exe
6f9318806efbd3b3727e71170cc3ab378d6151887abcb7fad01bd4cb45c2e127f8aea81a3a99bc77c2ce2424fb1acbc230ffc6c23e390c8800710b45b1367c3b
*impact32.exe
6035b971290cd0795389c2e8a0f02d2f079468e197a1db791189519e12aaf3fcdaf6e8842a7eeca386ad7f48f85a0b07cc5480b98ee06b0529688fd5550d3ee2
*times32.exe
4ba8afac0a419e30286f5b209b9fabf41aa480ceabb1bf3141deb775793510db826ba915b67fdfe3423d227c3e640bf7d682b26c0ce90f3c0e2cdf8d4831537e
*trebuc32.exe
96749fd17e4efeccdd467cb8f42ce30fc3a9e86eceef8b9c0934a4693d12944b54864006c5852c0d641a5c7b250553e5c6c21d716e446d02ef392299c7833d58
*verdan32.exe
2784ce1cee66f0f00f77d84d7aaa52a44d017245e0269558729003205c10a5e5368f9909beee733e77e202730b3cee2b2357fdbdb597a0023c6412e050b3a3ad
*webdin32.exe
++++++ fetchmsttfonts.sh.in ++++++
--- /var/tmp/diff_new_pack.paL6kR/_old 2015-12-16 17:42:28.000000000 +0100
+++ /var/tmp/diff_new_pack.paL6kR/_new 2015-12-16 17:42:28.000000000 +0100
@@ -5,7 +5,6 @@
POST_MESSAGE="/var/adm/update-messages/__NAME__-__VERSION__-__RELEASE__-1"
FONTS=" \
-dl.sourceforge.net/project/corefonts/the%20fonts/final/andale32.exe
dl.sourceforge.net/project/corefonts/the%20fonts/final/andale32.exe \
dl.sourceforge.net/project/corefonts/the%20fonts/final/arial32.exe \
dl.sourceforge.net/project/corefonts/the%20fonts/final/arialb32.exe \
@@ -126,6 +125,14 @@
echo "failed ... deleted!"
continue
fi
+ for algo in md5 sha1 sha512; do
+ grep $file __DOCDIR__/__NAME__/corefonts.$algo | ${algo}sum --check
--quiet --status > /dev/null 2>&1
+ if [ $? -ne 0 ]; then
+ rm -f $file
+ echo "$algo checksum mismatch for $file ... deleted!"
+ continue 2
+ fi
+ done
echo done
echo -n " Extracting ... "
cabextract -l $file >/dev/null 2>&1
