Hi,

On 2014-03-25 04:34:32 +0000, Steve M. Robbins wrote:
> Source: gmp
> Source-Version: 2:6.0.0+dfsg-1

How do you know that's an official release and not some compromised
tarball?

The signatures for the tarball are not available yet.
And there were no release candidates, and no announce in the
mailing-list!

-- 
Vincent Lefèvre <[email protected]> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

-- 
debian-science-maintainers mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/debian-science-maintainers

Reply via email to