Re: [ANN] Lua 5.3.1 (final) now available

[Lorenzo Donati <lorenzodonatibz@...>]

On 19/07/2015 21:32, Soni L. wrote:
> On 19/07/15 04:05 PM, Lorenzo Donati wrote:
> > On 19/07/2015 20:56, Jonathan Goble wrote:
> > > On Sun, Jul 19, 2015 at 2:47 PM, Lorenzo Donati
> > > <lorenzodonatibz@tiscali.it> wrote:
> > > > On 19/07/2015 20:17, Ashwin Hirschi wrote:
> > > > > > > http://www.lua.org/ftp/lua-5.3.1.tar.gz
> > > > > >
> > > > > >
> > > > > > I just downloaded that package and checked its signatures. I get a
> > > > > > mismatch for both:
> > > > > >
> > > > > > MD5: 797adacada8d85761c079390ff1d9961
> > > > > > SHA1: 1676c6a041d90b6982db8cef1e5fb26000ab6dee
> > > > >
> > > > >
> > > > > According to http://www.lua.org/download.html there is no mismatch.
> > > >
> > > >
> > > > Yep! Just checked. You're right!
> > > >
> > > > So the signatures in the message of lhf I replied to are wrong. But
> > > > @Dirk
> > > > seems to have downloaded a package that matches these older
> > > > signatures so
> > > > there is a problem somewhere. Was the release repackaged for some
> > > > reason? I
> > > > haven't seen any announce in the list about that. Maybe I missed a
> > > > message
> > > > (I'm not too active on the list lately).
> > > >
> > > > Cheers!
> > >
> > > The 797ada... and 1676c6... checksums match the Lua 5.3.0 gzipped
> > > tarball that I downloaded in early February.
> >
> > Yep! Just checked!
> > So it seems Luiz put the wrong signatures in the original post. Funny
> > no-one came up with the issue before! :-)
> Shows how much we care about security.

Let's say people here are not paranoid like me ;-) :-D

> > -- Lorenzo