[Date Prev][Date Next][Thread Prev][Thread Next]
- Subject: Re: [ANN] Lua 5.3.1 (final) now available
- From: Dirk Laurie <dirk.laurie@...>
- Date: Sun, 19 Jul 2015 21:05:27 +0200
2015-07-19 20:47 GMT+02:00 Lorenzo Donati <email@example.com>:
> On 19/07/2015 20:17, Ashwin Hirschi wrote:
>>> I just downloaded that package and checked its signatures. I get a
>>> mismatch for both:
>>> MD5: 797adacada8d85761c079390ff1d9961
>>> SHA1: 1676c6a041d90b6982db8cef1e5fb26000ab6dee
>> According to http://www.lua.org/download.html there is no mismatch.
> Yep! Just checked. You're right!
> So the signatures in the message of lhf I replied to are wrong. But @Dirk
> seems to have downloaded a package that matches these older signatures so
> there is a problem somewhere. Was the release repackaged for some reason? I
> haven't seen any announce in the list about that. Maybe I missed a message
> (I'm not too active on the list lately).
Sorry! I calculated checksums, saw them in your message, and
only now on rereading do I notice that they are your new checksums,
not the old ones.
So the webpage (and LHF's email) give the wrong checksums.
Jonathan's post leads one to suspect a possible mechanism for