[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-10 Thread Steve Dower 


Steve Dower  added the comment:

Confirmed. Neither was compromised, the only change was that the previous MSI 
did not have an embedded Authenticode signature.

I didn't even rebuild the MSI, tbh. I went back to my (secure, controlled) 
build machine and signed it manually.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-10 Thread andrejs-sisojevs-accenture 


andrejs-sisojevs-accenture  added the comment:

Oh, and also (please confirm) that 2841e92ba89a6f036305a8a07fbe9d18 was not 
security compromised.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-10 Thread andrejs-sisojevs-accenture 


andrejs-sisojevs-accenture  added the comment:

Please confirm, that old "2fe86194bb4027be75b29852027f1a79" was valid in past 
(as opposed to be security compromised). We need to make sure, since some of 
our devs downloaded and used that version with unconfirmed checksum.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-09 Thread SilentGhost 


Change by SilentGhost :


--
resolution:  -> fixed
stage:  -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-09 Thread Benjamin Peterson 


Benjamin Peterson  added the comment:

That's correct.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-09 Thread SilentGhost 


SilentGhost  added the comment:

I still see 2fe86194bb4027be75b29852027f1a79 as checksum

--
nosy: +SilentGhost

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-09 Thread Benjamin Peterson 


Benjamin Peterson  added the comment:

I think everything is correct now?

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-08 Thread Steve Dower 


Steve Dower  added the comment:

I redownloaded and confirmed that the files are correct.

Benjamin - the MD5 for the 32-bit installer didn't get updated. It should be 
912428345b7e0428544ec4edcdf70286 (as in my updated email I sent).

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-08 Thread Steve Dower 


Steve Dower  added the comment:

We updated the build to be properly code signed, but the CDN may still be 
caching the old release.

Nothing has changed except the signature on the installer (Python 2 binaries 
have never been signed). I'll run a CDN purge to try and clear it up.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-08 Thread Karthikeyan Singaravelan 


Karthikeyan Singaravelan  added the comment:

Strange, when I visit the link again in new tab then it gives me the checksum 
as described by OP. But I still have the old tab open with which I wrote my 
comment that has 2841e92ba89a6f036305a8a07fbe9d18 (20348928 bytes) and wget at 
the time also had this checksum as in my comment. I am in India.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-08 Thread Jeremy Kloth 


Jeremy Kloth  added the comment:

When I visit the provided link, I also see what OP describes.

Is it a caching/location issue?  I'm in US-Colorado.

--
nosy: +jkloth

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-08 Thread Karthikeyan Singaravelan 


Karthikeyan Singaravelan  added the comment:

The download page linked doesn't contain checksum 
2fe86194bb4027be75b29852027f1a79. The checksum in the page is 
2841e92ba89a6f036305a8a07fbe9d18 and I can confirm that the downloaded binary 
also has the correct checksum as below : 

karthi@ubuntu-s-1vcpu-1gb-blr1-01:~$ wget 
https://www.python.org/ftp/python/2.7.16/python-2.7.16.amd64.msi
karthi@ubuntu-s-1vcpu-1gb-blr1-01:~$ md5sum python-2.7.16.amd64.msi
2841e92ba89a6f036305a8a07fbe9d18  python-2.7.16.amd64.msi

>From https://www.python.org/downloads/release/python-2716/

> Windows x86-64 MSI installer Windows for AMD64/EM64T/x64 
> 2841e92ba89a6f036305a8a07fbe9d18 20348928 SIG

--
nosy: +steve.dower, xtreak

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-08 Thread Karthikeyan Singaravelan 


Change by Karthikeyan Singaravelan :


--
nosy: +benjamin.peterson

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-08 Thread andrejs-sisojevs-accenture 


andrejs-sisojevs-accenture  added the comment:

Checksum for earlier v2.7.15 is fine.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

2019-03-08 Thread andrejs-sisojevs-accenture 


New submission from andrejs-sisojevs-accenture :

On download page 
https://www.python.org/downloads/release/python-2716/
MD5 checksum for "Windows x86-64 MSI installer" is 
2fe86194bb4027be75b29852027f1a79

But download file checksum is `2841e92ba89a6f036305a8a07fbe9d18`.
Checksum calculated on 2 different machines (Windows and MacOS), both strongly 
protected by antiviruses.

--
components: Installation
messages: 337502
nosy: andrejs-sisojevs-accenture
priority: normal
severity: normal
status: open
title: MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"
versions: Python 2.7

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com