From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marius Bakke Subject: Re: [PATCH 0/1] Update pardre source hash. Date: Thu, 08 Dec 2016 14:37:41 +0100 Message-ID: <8760muzgm2.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> References: <20161208131215.1205-1-donttrustben@gmail.com> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:36483) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cEytU-0004kG-AL for guix-devel@gnu.org; Thu, 08 Dec 2016 08:37:53 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cEytP-0008Ew-Ah for guix-devel@gnu.org; Thu, 08 Dec 2016 08:37:52 -0500 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:46278) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cEytP-0008Ea-4n for guix-devel@gnu.org; Thu, 08 Dec 2016 08:37:47 -0500 In-Reply-To: <20161208131215.1205-1-donttrustben@gmail.com> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ben Woodcroft , guix-devel@gnu.org --=-=-= Content-Type: text/plain Ben Woodcroft writes: > Hi, > > It seems that the pardre source has been updated in place. I'm not sure what > the procedure is for verifying that nothing untoward has taken place, since I > cannot download and old version from the hydra content addressed mirror - > it does not seem to exist there either. "diffoscope" has native support for tarballs and can quickly point out any differences. Perhaps Ricardo has a copy at the MDC? Just checking the substitutes ought to be sufficient. That said, I've seen this happen in other distros, even at projects that "should know better" such as Chromium, so I assume it was just a "quick and dirty" bugfix. According to sourceforge it was updated July 6th, so it has likely been garbage collected on Hydra. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAlhJYiUACgkQoqBt8qM6 VPr1VQgArOh8LxXn7TG3PeKnk7B1KgrSVbQqumXQb+Hgq4tOtK7+PAg85v9TfSH6 zqbLrb3WFizdD1G/n46Ehtv4DKyU+P7Oc10CHqugac6yObhhYXXKuI69rSZz5q4b BJh49SbfrBVJiUSjcLedKXCtkiSlvISRlob1PDKTz7v73FPNI9Ibb+Y+3j7Yfi7v tcsH3xH+yz0lox6pwL8if1lAexSRUgqapcfV9LGkLmZLAiFoWWXhKu0QWHtL3HaO ao0U0Y+gXEvuGgg2kN3yl3Od3Ttha+HKdJBNOufCUE3ICdiKdD4PAD3+8RZzBwNC 2m2TEUxPYRXO3kFT1xb07zWgyOrkYA== =s4MG -----END PGP SIGNATURE----- --=-=-=--