ctubbsii commented on pull request #381: URL: https://github.com/apache/fluo-muchos/pull/381#issuecomment-754225310
I also confirmed (with `rpm2cpio`) that both CPIO payloads were identical, and confirmed (with `rpm -qp --xml`) that the only differences in the RPM header were the expected different `Sigpgp` and `Rsaheader` header tags. I double-checked with `rpm -qp --scripts` also, but that was a bit redundant, since `--xml` includes the scriptlets. So, it really does appear that the only thing that changed was that somebody re-signed the RPM. Weird, but at least, we know the content didn't change in any way that would be a risk. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
