I've re-synced several times from different servers, and I've deleted the previously downloaded distfile, but I still get this: These are the packages that I would merge, in reverse order: Calculating world dependencies ...done! [ebuild U ] app-text/jabref-1.7.1 [1.7] -jikes 1,681 kB Total size of downloads: 1,681 kB Do you want me to merge these packages? [Yes/No] >>> emerge (1 of 1) app-text/jabref-1.7.1 to / >>> Downloading http://distfiles.gentoo.org/distfiles/JabRef-1.7.1.src.tar.bz2 --07:52:29-- http://distfiles.gentoo.org/distfiles/JabRef-1.7.1.src.tar.bz2 => `/usr/portage/distfiles/JabRef-1.7.1.src.tar.bz2' Resolving distfiles.gentoo.org... 140.211.166.134, 156.56.247.195, 216.165.129.135 Connecting to distfiles.gentoo.org[140.211.166.134]:80... connected. HTTP request sent, awaiting response... 200 OK Length: 1,730,995 [application/x-tar] 100%[=======================================================================>] 1,730,995 80.01K/s ETA 00:00 07:52:51 (78.28 KB/s) - `/usr/portage/distfiles/JabRef-1.7.1.src.tar.bz2' saved [1730995/1730995] !!! Digest verification Failed: !!! /usr/portage/distfiles/JabRef-1.7.1.src.tar.bz2 !!! Reason: Filesize does not match recorded size Reproducible: Always Steps to Reproduce:
cc'ing security, just in case
upstream problem, they've just added things to their distfile. in this case i can say, not guilty :). see the diff: http://dev.gentoo.org/~luckyduck/jabref-diff.txt they've added license files and stuff like that. i'll recommit the digest and report the problem upstream.
fixed in cvs, email sent. thanks for reporting and for supporting our development.