bad PGP signature lire-1.2.1.tar.gz.asc fixed (was: Re: Lire 1.2.1 is released (Important bug fix))

Joost van Baal joostvb at logreport.org
Thu Dec 5 12:04:53 CET 2002


On Tue, Dec 03, 2002 at 01:09:22PM -0500, Francis J. Lacoste wrote:
> An important bug was discovered in the 1.2 release that was
> made last Friday.

> The update is available from http://www.logreport.org/pub

From Dec 3 18:55 CET 2002 till Dec 4 21:12 CET, the file
http://logreport.org/pub/lire-1.2.1.tar.gz.asc contained a bad signature
from lire-1.2.1.tar.gz.  A new build lire-1.2.1.tar.gz got uploaded,
with a new (and valid) PGP signature.  One can verify the new build's
integrity by doing

 gpg --verify lire-1.2.1.tar.gz.asc lire-1.2.1.tar.gz

.  We've manually diff-ed the old with the new build, the old one was
ok.  Therefore, you're probably save if you've installed the old build.

The file lire-full-1.2.1.tar.gz along with its signature
lire-full-1.2.1.tar.gz.asc hasn't changed: these where both fine.

We're sorry for this hassle.

Bye,

Joost

-- 
.    .                                        http://logreport.com/
| '.|                        /^LogReport$/
| Lire                                        http://logreport.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.logreport.org/pipermail/announcement/attachments/20021205/3647c1f8/attachment.bin 


More information about the Announcement mailing list