From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: bug#28326: exiv2 0.26 hash mismatch Date: Sat, 2 Sep 2017 10:51:50 -0400 Message-ID: <20170902145150.GA31990@jasmine.lan> References: <87fuc5wsvh.fsf@gmail.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Qxx1br4bt0+wmkIi" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:60351) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1do9mJ-00008L-Q5 for bug-guix@gnu.org; Sat, 02 Sep 2017 10:52:12 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1do9mE-0005A9-UX for bug-guix@gnu.org; Sat, 02 Sep 2017 10:52:07 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:34933) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1do9mE-0005A3-ND for bug-guix@gnu.org; Sat, 02 Sep 2017 10:52:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1do9mE-00081l-Fo for bug-guix@gnu.org; Sat, 02 Sep 2017 10:52:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: Content-Disposition: inline In-Reply-To: <87fuc5wsvh.fsf@gmail.com> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Maxim Cournoyer Cc: 28326@debbugs.gnu.org --Qxx1br4bt0+wmkIi Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Sep 02, 2017 at 01:51:14AM -0400, Maxim Cournoyer wrote: > tl;dr: exiv2 source archive was updated in-place and the verification > below gives us confidence that we can safely update the hash. Thanks for your investigation! > A pretty harmless cleanup. Still, the practice of updating a release in > place is not very good... Upon further digging, the issue was already > reported and discussed[3][4]. >=20 > Note: they are moving to Github and in the furure the releases will be > offered directly through Github. >=20 > Patch will follow. Okay, great! --Qxx1br4bt0+wmkIi Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlmqxYIACgkQJkb6MLrK fwi2BA/9Ej+G0G/qSQy2tBMGr/yg1zL4hmXybyKiylfeCg2mEPo5yUoqDD43Jwse p9bashVvnvsqVae274T+UC1UG+yjznHxp7E/60M93y6JCgTQyIpEB1iE39mff3KW b2oS/V0Ii0wqIQhrUUcK9kZuTRILvJLtbMO/T+6xrydzYIB5OGJRpocThL6Wzo0p 2OSCAbUDUmZXWni6sQE8ZiQujEqvRo8HiXSsBISTVDA9A7ndixSxOmY8xuboERSp yI13On8GvJGuhTkjR6cwCqOK0fq7itnDdf+6nrODNub/QuM0e+W+E4wC5hi4Edq+ PvFxcH4duVanWsFmI7sbPWB63um4toYVfnpXBSl5UFCk8DtVHTC20towFOAFYB0G HbSRVKjD+8xs7sn7y44p3apwsaPlq75RAgnqWJ0LkHh2GChUUlWHSvXpOULWMhD+ 88KbGEpjKnjvVZBnZSJlLHJbySBfbC/uj8E1Gk6IE0raMJA4MeacJVNstvXSD24u /RyCPmPCyV0vjwsuTuzrAv7oqrUodOmGnE8Juz/vToj4nwj1zPom0Cn8i2Sm4oFj fnVK9Lkg4F6yEacg9aX0mHcKLhVQaxnHgyD/YmTXHe/ao+R9CAvodcfFTnCuYX3s us7OK1OLJJ6A+2BkHmO5s0hGSSWQ1P5UttgfGP+TF7TYd7hxmGo= =yPNv -----END PGP SIGNATURE----- --Qxx1br4bt0+wmkIi--