Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Were 9.5.6 release files changed? #605

Closed
kbertalan opened this issue Jan 22, 2022 · 2 comments
Closed

Were 9.5.6 release files changed? #605

kbertalan opened this issue Jan 22, 2022 · 2 comments
Labels

Comments

@kbertalan
Copy link

Recent installs using Arch linux chez-scheme AUR package are failing due to mismatch in the sha256 sum of csv9.5.6.tar.gz.
The package expects to see this sha 256 sum:

6b3d1d111c6c47a4e51b500b30f4c29efd339e414f6ace743cff6d08a0dacaae

When I download the file I see this sha 256 sum:

9aaa208c63eda8edfad72566790db0f9cedc7c6bb860157c400c98e22583c6b4

The AUR package definition has not changed since 24th November, see the change history. I had used it for installing chez scheme, and I'm pretty sure that the checksum was fine before.

This kind of changes can mean security risks.

Was there any known change made on the release files recently?

@jltaylor-us
Copy link
Contributor

The tarballs were updated so that s/update-revision has the proper revision ids (to match what git archive would produce). @burgerrg or @owaddell can provide more details and rationale if necessary.

@kbertalan
Copy link
Author

@jltaylor-us Thanks for the answer. I am glad that this was a known/planned change.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants