diff mbox series

[meta-networking] dovecot: Fix checksum mismatch

Message ID 20260410102704.1621-1-wangmy@fujitsu.com
State Under Review
Headers show
Series [meta-networking] dovecot: Fix checksum mismatch | expand

Commit Message

Mingyu Wang (Fujitsu) April 10, 2026, 10:27 a.m. UTC 
From: Wang Mingyu <wangmy@fujitsu.com>

Update the sha256sum to match the current upstream archive.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 meta-networking/recipes-support/dovecot/dovecot_2.4.3.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comments

Martin Jansa April 10, 2026, 10:37 a.m. UTC | #1 
On Fri, Apr 10, 2026 at 12:27 PM wangmy via lists.openembedded.org
<wangmy=fujitsu.com@lists.openembedded.org> wrote:
>
> From: Wang Mingyu <wangmy@fujitsu.com>
>
> Update the sha256sum to match the current upstream archive.

Can you please check what changed in the archive and explain it in the
commit message?

You might also need to set downloadfilename in SRC_URI to avoid
reusing old archive from PREMIRROR (and failing because the checksum
won't match).

In the end we should ask upstream not to re-create the existing
releases if it was intentionally modified in the first place.

Cheers,
Martin Maurer April 10, 2026, 11:12 a.m. UTC | #2 
Hi,

I don't know what dovecat is at all, but I just found out, that two 
version 2.4.3 seem to exist:


https://github.com/dovecot/core/releases/download/2.4.3/dovecot-2.4.3.tar.gz

sha256:e0b30330fe51e47ecfcf641bc16041184d91bdd0ac3db789b7cef54e3a75ac9b


https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz

SHA256: ff0be85228122f250627b19e67505fdb7fb2f72a702ef6bf35f27fce54c072e5

When downloading both and comparing them:

The doc/man directory seem to be different.

When I had looked correctly, all others files seems to be identical.


Perhaps worth to ask the maintainer of dovecat, what is going on...


Best regards,

Martin


Am 10.04.2026 um 12:37 schrieb Martin Jansa via lists.openembedded.org:
> On Fri, Apr 10, 2026 at 12:27 PM wangmy via lists.openembedded.org
> <wangmy=fujitsu.com@lists.openembedded.org> wrote:
>> From: Wang Mingyu <wangmy@fujitsu.com>
>>
>> Update the sha256sum to match the current upstream archive.
> Can you please check what changed in the archive and explain it in the
> commit message?
>
> You might also need to set downloadfilename in SRC_URI to avoid
> reusing old archive from PREMIRROR (and failing because the checksum
> won't match).
>
> In the end we should ask upstream not to re-create the existing
> releases if it was intentionally modified in the first place.
>
> Cheers,
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#126240): https://lists.openembedded.org/g/openembedded-devel/message/126240
> Mute This Topic: https://lists.openembedded.org/mt/118757385/7924060
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [referme@gmx.de]
> -=-=-=-=-=-=-=-=-=-=-=-
>
Martin Maurer April 10, 2026, 3:03 p.m. UTC | #3 
Hello,

update!

I have not received an answer yet from dovecot.org, but I found this 
message in their mailing list,

which was written a few hours ago (I assume after reporting the problem):

https://dovecot.org/mailman3/archives/list/dovecot-news@dovecot.org/thread/V37BEIZTNQODMWIHMTQK5DSOM5RDJ7NF/

I see an update on github:

https://github.com/dovecot/core/releases/tag/2.4.3


The SHA256 checksum is now equal on both download places and it is

SHA256: ff0be85228122f250627b19e67505fdb7fb2f72a702ef6bf35f27fce54c072e5

So I think, that Mingyus patch is needed (and correct) to adapt checksum 
to the new value.

Best regards,

Martin


Am 10.04.2026 um 13:12 schrieb Martin Maurer via lists.openembedded.org:
> Hi,
>
> I don't know what dovecat is at all, but I just found out, that two 
> version 2.4.3 seem to exist:
>
>
> https://github.com/dovecot/core/releases/download/2.4.3/dovecot-2.4.3.tar.gz 
>
>
> sha256:e0b30330fe51e47ecfcf641bc16041184d91bdd0ac3db789b7cef54e3a75ac9b
>
>
> https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz
>
> SHA256: ff0be85228122f250627b19e67505fdb7fb2f72a702ef6bf35f27fce54c072e5
>
> When downloading both and comparing them:
>
> The doc/man directory seem to be different.
>
> When I had looked correctly, all others files seems to be identical.
>
>
> Perhaps worth to ask the maintainer of dovecat, what is going on...
>
>
> Best regards,
>
> Martin
>
>
> Am 10.04.2026 um 12:37 schrieb Martin Jansa via lists.openembedded.org:
>> On Fri, Apr 10, 2026 at 12:27 PM wangmy via lists.openembedded.org
>> <wangmy=fujitsu.com@lists.openembedded.org> wrote:
>>> From: Wang Mingyu <wangmy@fujitsu.com>
>>>
>>> Update the sha256sum to match the current upstream archive.
>> Can you please check what changed in the archive and explain it in the
>> commit message?
>>
>> You might also need to set downloadfilename in SRC_URI to avoid
>> reusing old archive from PREMIRROR (and failing because the checksum
>> won't match).
>>
>> In the end we should ask upstream not to re-create the existing
>> releases if it was intentionally modified in the first place.
>>
>> Cheers,
>>
>>
>>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#126241):https://lists.openembedded.org/g/openembedded-devel/message/126241
> Mute This Topic:https://lists.openembedded.org/mt/118757385/7924060
> Group Owner:openembedded-devel+owner@lists.openembedded.org
> Unsubscribe:https://lists.openembedded.org/g/openembedded-devel/unsub [referme@gmx.de]
> -=-=-=-=-=-=-=-=-=-=-=-
>
Martin Jansa April 10, 2026, 3:07 p.m. UTC | #4 
Thank you Martin for reporting upstream and providing the details.

Please send v2 with updated commit message and downloadfilename.

Cheers,

On Fri, Apr 10, 2026 at 5:03 PM Martin Maurer <referme@gmx.de> wrote:

> Hello,
>
> update!
>
> I have not received an answer yet from dovecot.org, but I found this
> message in their mailing list,
>
> which was written a few hours ago (I assume after reporting the problem):
>
>
> https://dovecot.org/mailman3/archives/list/dovecot-news@dovecot.org/thread/V37BEIZTNQODMWIHMTQK5DSOM5RDJ7NF/
>
> I see an update on github:
>
> https://github.com/dovecot/core/releases/tag/2.4.3
>
>
> The SHA256 checksum is now equal on both download places and it is
>
> SHA256: ff0be85228122f250627b19e67505fdb7fb2f72a702ef6bf35f27fce54c072e5
>
> So I think, that Mingyus patch is needed (and correct) to adapt checksum
> to the new value.
>
> Best regards,
>
> Martin
>
>
> Am 10.04.2026 um 13:12 schrieb Martin Maurer via lists.openembedded.org:
>
> Hi,
>
> I don't know what dovecat is at all, but I just found out, that two
> version 2.4.3 seem to exist:
>
>
>
> https://github.com/dovecot/core/releases/download/2.4.3/dovecot-2.4.3.tar.gz
>
> sha256:e0b30330fe51e47ecfcf641bc16041184d91bdd0ac3db789b7cef54e3a75ac9b
>
>
> https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz
>
> SHA256: ff0be85228122f250627b19e67505fdb7fb2f72a702ef6bf35f27fce54c072e5
>
> When downloading both and comparing them:
>
> The doc/man directory seem to be different.
>
> When I had looked correctly, all others files seems to be identical.
>
>
> Perhaps worth to ask the maintainer of dovecat, what is going on...
>
>
> Best regards,
>
> Martin
>
>
> Am 10.04.2026 um 12:37 schrieb Martin Jansa via lists.openembedded.org:
>
> On Fri, Apr 10, 2026 at 12:27 PM wangmy via lists.openembedded.org
> <wangmy=fujitsu.com@lists.openembedded.org>
> <wangmy=fujitsu.com@lists.openembedded.org> wrote:
>
> From: Wang Mingyu <wangmy@fujitsu.com> <wangmy@fujitsu.com>
>
> Update the sha256sum to match the current upstream archive.
>
> Can you please check what changed in the archive and explain it in the
> commit message?
>
> You might also need to set downloadfilename in SRC_URI to avoid
> reusing old archive from PREMIRROR (and failing because the checksum
> won't match).
>
> In the end we should ask upstream not to re-create the existing
> releases if it was intentionally modified in the first place.
>
> Cheers,
>
>
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#126241): https://lists.openembedded.org/g/openembedded-devel/message/126241
> Mute This Topic: https://lists.openembedded.org/mt/118757385/7924060
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [referme@gmx.de]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>
>
Martin Maurer April 10, 2026, 3:11 p.m. UTC | #5 
Hi Mingyu,

please take over the task to send an updated patch with the requested 
changes.

Many thanks!

Best regards,

Martin


Am 10.04.2026 um 17:07 schrieb Martin Jansa via lists.openembedded.org:
> Thank you Martin for reporting upstream and providing the details.
>
> Please send v2 with updated commit message and downloadfilename.
>
> Cheers,
>
> On Fri, Apr 10, 2026 at 5:03 PM Martin Maurer <referme@gmx.de> wrote:
>
>     Hello,
>
>     update!
>
>     I have not received an answer yet from dovecot.org
>     <http://dovecot.org>, but I found this message in their mailing list,
>
>     which was written a few hours ago (I assume after reporting the
>     problem):
>
>     https://dovecot.org/mailman3/archives/list/dovecot-news@dovecot.org/thread/V37BEIZTNQODMWIHMTQK5DSOM5RDJ7NF/
>
>     I see an update on github:
>
>     https://github.com/dovecot/core/releases/tag/2.4.3
>
>
>     The SHA256 checksum is now equal on both download places and it is
>
>     SHA256:
>     ff0be85228122f250627b19e67505fdb7fb2f72a702ef6bf35f27fce54c072e5
>
>     So I think, that Mingyus patch is needed (and correct) to adapt
>     checksum to the new value.
>
>     Best regards,
>
>     Martin
>
>
>     Am 10.04.2026 um 13:12 schrieb Martin Maurer via
>     lists.openembedded.org <http://lists.openembedded.org>:
>>     Hi,
>>
>>     I don't know what dovecat is at all, but I just found out, that
>>     two version 2.4.3 seem to exist:
>>
>>
>>     https://github.com/dovecot/core/releases/download/2.4.3/dovecot-2.4.3.tar.gz
>>
>>
>>     sha256:e0b30330fe51e47ecfcf641bc16041184d91bdd0ac3db789b7cef54e3a75ac9b
>>
>>
>>
>>     https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz
>>
>>     SHA256:
>>     ff0be85228122f250627b19e67505fdb7fb2f72a702ef6bf35f27fce54c072e5
>>
>>     When downloading both and comparing them:
>>
>>     The doc/man directory seem to be different.
>>
>>     When I had looked correctly, all others files seems to be identical.
>>
>>
>>     Perhaps worth to ask the maintainer of dovecat, what is going on...
>>
>>
>>     Best regards,
>>
>>     Martin
>>
>>
>>     Am 10.04.2026 um 12:37 schrieb Martin Jansa via
>>     lists.openembedded.org <http://lists.openembedded.org>:
>>>     On Fri, Apr 10, 2026 at 12:27 PM wangmy via
>>>     lists.openembedded.org <http://lists.openembedded.org>
>>>     <wangmy=fujitsu.com@lists.openembedded.org>
>>>     <mailto:wangmy=fujitsu.com@lists.openembedded.org> wrote:
>>>>     From: Wang Mingyu <wangmy@fujitsu.com> <mailto:wangmy@fujitsu.com>
>>>>
>>>>     Update the sha256sum to match the current upstream archive.
>>>     Can you please check what changed in the archive and explain it
>>>     in the
>>>     commit message?
>>>
>>>     You might also need to set downloadfilename in SRC_URI to avoid
>>>     reusing old archive from PREMIRROR (and failing because the
>>>     checksum
>>>     won't match).
>>>
>>>     In the end we should ask upstream not to re-create the existing
>>>     releases if it was intentionally modified in the first place.
>>>
>>>     Cheers,
>>>
>>>
>>>
>>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#126244):https://lists.openembedded.org/g/openembedded-devel/message/126244
> Mute This Topic:https://lists.openembedded.org/mt/118757385/7924060
> Group Owner:openembedded-devel+owner@lists.openembedded.org
> Unsubscribe:https://lists.openembedded.org/g/openembedded-devel/unsub [referme@gmx.de]
> -=-=-=-=-=-=-=-=-=-=-=-
>
diff mbox series

Patch

diff --git a/meta-networking/recipes-support/dovecot/dovecot_2.4.3.bb b/meta-networking/recipes-support/dovecot/dovecot_2.4.3.bb
index 10ca595029..a6b78ea781 100644
--- a/meta-networking/recipes-support/dovecot/dovecot_2.4.3.bb
+++ b/meta-networking/recipes-support/dovecot/dovecot_2.4.3.bb
@@ -16,7 +16,7 @@  SRC_URI = "https://dovecot.org/releases/2.4/dovecot-${PV}.tar.gz \
            file://0001-m4-Check-for-libunwind-instead-of-libunwind-generic.patch \
            file://0001-adapt-lua_newstate-to-new-api.patch \
            "
-SRC_URI[sha256sum] = "e0b30330fe51e47ecfcf641bc16041184d91bdd0ac3db789b7cef54e3a75ac9b"
+SRC_URI[sha256sum] = "ff0be85228122f250627b19e67505fdb7fb2f72a702ef6bf35f27fce54c072e5"
 
 DEPENDS = "openssl xz zlib bzip2 libcap icu libtirpc bison-native"
 CFLAGS += "-I${STAGING_INCDIR}/tirpc"