From mboxrd@z Thu Jan 1 00:00:00 1970 From: ng0 Subject: bug#27556: libpng has wrong hash. [Fwd: Re: why has the hash for libpng-apng 1.6.28 changed?] Date: Sun, 23 Jul 2017 10:15:47 +0000 Message-ID: <20170723101547.3oi5uu2xhi625njp@abyayala> References: <20170702201344.dvqpopouvpbzr4c2@abyayala> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="ubriisq25ky4h3as" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:36248) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dZDwf-00037a-E3 for bug-guix@gnu.org; Sun, 23 Jul 2017 06:17:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dZDwc-0007H1-9u for bug-guix@gnu.org; Sun, 23 Jul 2017 06:17:05 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:50211) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dZDwc-0007Gs-5Y for bug-guix@gnu.org; Sun, 23 Jul 2017 06:17:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dZDwb-0005mA-QG for bug-guix@gnu.org; Sun, 23 Jul 2017 06:17:01 -0400 In-Reply-To: <20170702201344.dvqpopouvpbzr4c2@abyayala> Sender: "Debbugs-submit" Resent-Message-ID: Content-Disposition: inline List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: 27556@debbugs.gnu.org --ubriisq25ky4h3as Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable ----- Forwarded message ----- > Date: Sun, 23 Jul 2017 18:21:19 +0900 (JST) > To: ng0 > Cc: daisuken@users.sourceforge.net > Subject: Re: why has the hash for libpng-apng 1.6.28 changed? >=20 > Hi, >=20 > I calculated the hash for libpng-apng files on my local orignals. >=20 > md5sum > 9f2b36bccf89c5f4097111f0f73c1798 libpng-1.6.28-apng.patch.README.txt > fca7c6d87c8352e645facefc2e1dd153 libpng-1.6.28-apng.patch.gz >=20 > sha1sum > cb620589ecf9c28a4ecc00e6225dd41ca660a959 libpng-1.6.28-apng.patch.README= =2Etxt > 4fa952f5ad374fce8d478b7e54ee4298a0b8d159 libpng-1.6.28-apng.patch.gz >=20 > Local file time stamps are > 2017-01-06 21:02:10.938833896 +0900 libpng-1.6.28-apng.patch.README.txt > 2017-01-06 21:02:10.938833896 +0900 libpng-1.6.28-apng.patch.gz >=20 > That values equals on sourceforge.net. > https://sourceforge.net/projects/libpng-apng/files/libpng16/1.6.28/ >=20 > I don't really understand what happend, but it look just fine. >=20 > Cheers, > --- > daisuken@users.sourceforge.net >=20 >=20 > From: ng0 > Subject: why has the hash for libpng-apng 1.6.28 changed? > Date: Sat, 22 Jul 2017 09:06:28 +0000 > Message-ID: <20170722090628.rvnmyvafhkgrnl7t@abyayala> >=20 > ng0> Hi, > ng0>=20 > ng0> I noticed that the hash for libpng-apng at the source changed, for v= ersion 1.6.28. > ng0>=20 > ng0> Can you tell me what happened? As libpng-apng is a recent addition i= n our > ng0> system (GNU Guix) I'm not yet aware of any bad or good practices or = the > ng0> lack of them libpng-apng applies. > ng0> My current guess is that you changed the tarball in place, or that > ng0> Sourceforge changed it in place. We'll diff the tarball contents and= see > ng0> what changed, but a maintainers reply will also be good. > ng0>=20 > ng0> Greetings, > ng0> --=20 > ng0> ng0 > ng0> GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588 > ng0> GnuPG: https://n0is.noblogs.org/my-keys > ng0> https://www.infotropique.org https://krosos.org >=20 ----- End forwarded message ----- --=20 ng0 GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588 GnuPG: https://n0is.noblogs.org/my-keys https://www.infotropique.org https://krosos.org --ubriisq25ky4h3as Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEqIyK3RKYKNfqwC5S4i+bv+40hYgFAll0d1MACgkQ4i+bv+40 hYiK/g/8CM2sPikpy36inKNaW2YS5+oxDKg3QlE5+bLV/ET28RTgHiKJO6LcR5NV zZ7QH+BtLAz1LhsgqtMESsQLBeQTGL4uBHe3bNAb+a9SAH/ZFMFLZD6s/TVCkRiK Irit6oRpfD1v2mniQfL9SZHXturTAQNhicCx7/L/Dbczu0Bvfjts1RO/WSBHcJXh h+mPs7w+5NnHTO8pHXcJDvacx1QnCMykgiGnrsCWjE+KSMJvYyGaGECAEYP87aE8 +R69EFXnSFxRmMTgUxJ3rbGtPrO2z5gqMNvDinWbioTM/U7AjF07oNzqBQ/9IRbu I+4oo3INKmIERJsWbAXQ7mUOBFP9J/+q6RZIyY+Pzupqhsh9jLuVVP7hwSMsWoGd dbVarUxI/nsma08YZO9FN2iAf/myFnGuqzrB0u+Ti/CLsKDfEltk9OWT8XboINac h9jjiC594pPsoaaRU5asnlM93+bcIfU2h+fm4ATzo+HgO1h7wW1NvP1bmP4z/5Ag ew8T92+VpET+SyBE7yCiM9h+0Idc/K9Ud3wmMnpT2r02ShO+zCmDUz26rCG1Jqyu 2ZvcuebpXg5KCf3UayizegJcYPtU8bOg5YJB45If9Su1ePWz5mEn0WL+joLw9SLj Y2GomKX7pZkGW3ISOYBVfIHOCCDUOY82YUn20iUYnhoNnLHwwmg= =TgKM -----END PGP SIGNATURE----- --ubriisq25ky4h3as--