lua-users home
lua-l archive

[Date Prev][Date Next][Thread Prev][Thread Next] [Date Index] [Thread Index]




On 19/07/15 04:05 PM, Lorenzo Donati wrote:


On 19/07/2015 20:56, Jonathan Goble wrote:
On Sun, Jul 19, 2015 at 2:47 PM, Lorenzo Donati
<lorenzodonatibz@tiscali.it> wrote:
On 19/07/2015 20:17, Ashwin Hirschi wrote:


http://www.lua.org/ftp/lua-5.3.1.tar.gz


I just downloaded that package and checked its signatures. I get a
mismatch for both:

MD5: 797adacada8d85761c079390ff1d9961
SHA1: 1676c6a041d90b6982db8cef1e5fb26000ab6dee


According to http://www.lua.org/download.html there is no mismatch.


Yep! Just checked. You're right!

So the signatures in the message of lhf I replied to are wrong. But @Dirk seems to have downloaded a package that matches these older signatures so there is a problem somewhere. Was the release repackaged for some reason? I haven't seen any announce in the list about that. Maybe I missed a message
(I'm not too active on the list lately).

Cheers!

The 797ada... and 1676c6... checksums match the Lua 5.3.0 gzipped
tarball that I downloaded in early February.



Yep! Just checked!
So it seems Luiz put the wrong signatures in the original post. Funny no-one came up with the issue before! :-)
Shows how much we care about security.


-- Lorenzo


--
Disclaimer: these emails are public and can be accessed from <TODO: get a non-DHCP IP and put it here>. If you do not agree with this, DO NOT REPLY.