On Sat, Sep 02, 2017 at 01:51:14AM -0400, Maxim Cournoyer wrote:
> tl;dr: exiv2 source archive was updated in-place and the verification
> below gives us confidence that we can safely update the hash.

Thanks for your investigation!

> A pretty harmless cleanup. Still, the practice of updating a release in
> place is not very good... Upon further digging, the issue was already
> reported and discussed[3][4].
> 
> Note: they are moving to Github and in the furure the releases will be
> offered directly through Github.
> 
> Patch will follow.

Okay, great!

Attachment: signature.asc
Description: PGP signature

Reply via email to