Sunday 28 May 2006 21:48 skrev Hemmann, Volker Armin:
> > This change could be a
> > bugfix. By making your own digest you don't get this bugfix...
>
> more probably - the mirror corrupted the file. Or someone replaced it with
> a hacked package.

While that is possible I'm not really sure why you consider it more likely.

At least in my case this bug showed when I upgraded from perl-cleaner-1.03 to 
perl-cleaner-1.03-r1. Those two ebuilds are identical and use the same tar 
file as source. This means that when I originally (a couple of weeks ago) 
installed 1.03 the digest fitted the other, smaller tar file, which means 
that devs has approved both versions of that tar file). It did install 
successfully (and seemed to work) so it couldn't be too corrupted.

So while it is possible that the devs approved a file that shouldn't have been 
approved, I prefer to think that upstream just did something stupid by 
upgrading the package without a revision bump.. :)

-- 
Bo Andresen

Attachment: pgp13EeZEtVTX.pgp
Description: PGP signature

Reply via email to