Re: [ANN] Lua 5.3.1 (final) now available

["Soni L." <fakedme@...>]

On 19/07/15 04:05 PM, Lorenzo Donati wrote:
> On 19/07/2015 20:56, Jonathan Goble wrote:
> > On Sun, Jul 19, 2015 at 2:47 PM, Lorenzo Donati
> > <lorenzodonatibz@tiscali.it> wrote:
> > > On 19/07/2015 20:17, Ashwin Hirschi wrote:
> > > > > > http://www.lua.org/ftp/lua-5.3.1.tar.gz
> > > > >
> > > > >
> > > > > I just downloaded that package and checked its signatures. I get a
> > > > > mismatch for both:
> > > > >
> > > > > MD5: 797adacada8d85761c079390ff1d9961
> > > > > SHA1: 1676c6a041d90b6982db8cef1e5fb26000ab6dee
> > > >
> > > >
> > > > According to http://www.lua.org/download.html there is no mismatch.
> > >
> > >
> > > Yep! Just checked. You're right!
> > >
> > > So the signatures in the message of lhf I replied to are wrong. But 
> > > @Dirk
> > > seems to have downloaded a package that matches these older 
> > > signatures so
> > > there is a problem somewhere. Was the release repackaged for some 
> > > reason? I
> > > haven't seen any announce in the list about that. Maybe I missed a 
> > > message
> > > (I'm not too active on the list lately).
> > >
> > > Cheers!
> >
> > The 797ada... and 1676c6... checksums match the Lua 5.3.0 gzipped
> > tarball that I downloaded in early February.
>
> Yep! Just checked!
> So it seems Luiz put the wrong signatures in the original post. Funny 
> no-one came up with the issue before! :-)
Shows how much we care about security.
> -- Lorenzo

--
Disclaimer: these emails are public and can be accessed from <TODO: get a non-DHCP IP and put it here>. If you do not agree with this, DO NOT REPLY.