savannah-hackers
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[savannah-help-public] numdiff package checksum change


From: Joshua Hoblitt
Subject: [savannah-help-public] numdiff package checksum change
Date: Wed, 18 May 2016 17:59:29 -0700
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.0

The checksum on the numdiff 5.8.1 tarball has mysteriously changed. This
package was frequently download by a deployment script that is run
frequently at my $day_job.  We have disconnected usage of it as of a few
moments ago.  It is likely this change happened occurred in last day or two.

Source:

http://download-mirror.savannah.gnu.org/releases//numdiff/numdiff-5.8.1.tar.gz

Was:

a295eb391f6cb1578209fc6b4f9d994e  numdiff-5.8.1.tar.gz
dae1fac5d2ba2e40b7713d6ef9647c94b572b4e1  numdiff-5.8.1.tar.gz
-rw-r--r--. 1 build0 jenkins-slave 894729 Jan 22 15:17 numdiff-5.8.1.tar.gz

Is:

ce8ac83b89812f71ea7289a2975e598b  numdiff-5.8.1.tar.gz
2c0397652619e0f6bd5ddeb1fe1f20c973d3f37c  numdiff-5.8.1.tar.gz
-rw-rw-r-- 1 jhoblitt jhoblitt 894729 Sep 15  2013 numdiff-5.8.1.tar.gz

$ tar -xvf numdiff-5.8.1.tar.gz
./numdiff-5.8.1/
./numdiff-5.8.1/linesplit.h
./numdiff-5.8.1/INSTALL
./numdiff-5.8.1/linesplit.c
./numdiff-5.8.1/getopt1.c
./numdiff-5.8.1/side.c
./numdiff-5.8.1/COPYING
./numdiff-5.8.1/docs/
./numdiff-5.8.1/docs/numdiff.html
./numdiff-5.8.1/docs/fdl.texi
./numdiff-5.8.1/docs/ndselect.1
./numdiff-5.8.1/docs/numdiff.txt
./numdiff-5.8.1/docs/numdiff.info
tar: Skipping to next header

gzip: stdin: invalid compressed data--crc error

gzip: stdin: invalid compressed data--length error
tar: Child returned status 1
tar: Error is not recoverable: exiting now

The tarball seems to be corrupted, so my suspicion is that this is a
storage problem rather than malicious activity.

-Josh

--

Attachment: signature.asc
Description: OpenPGP digital signature


reply via email to

[Prev in Thread] Current Thread [Next in Thread]