!!! Fetched file: bc-java-r1rv72.tar.gz VERIFY FAILED! !!! Reason: Filesize does not match recorded size !!! Got: 26443874 !!! Expected: 380374879 Refetching... File renamed to '/var/cache/distfiles/bc-java-r1rv72.tar.gz._checksum_failure_.kow4eg13'
Created attachment 867805 [details] info.txt
Looks like upstream retag this in Apr.8 https://github.com/bcgit/bc-java/releases/tag/r1rv72
This version is affected by CVE-2023-33201. Going for 1.76 in https://github.com/gentoo/gentoo/pull/32309
Cannot reproduce this bug. Closing.
Still could be reproduced, maybe you should clean your distfiles. /var/cache/distfiles/bc-java-r1rv72.tar.gz
(In reply to jinqiang zhang from comment #5) > Still could be reproduced, maybe you should clean your distfiles. > /var/cache/distfiles/bc-java-r1rv72.tar.gz Ok. Regardless of distfiles I an reproduce with GENTO_MIRRORS="" So the filesizes on GENTOO_MIRRORS still match. Wrt CVE-2023-33201 it will be obsoleted (fixed) with new versions in bug #912248.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d805fc5eae9c970ea06694cc485fe945e060a843 commit d805fc5eae9c970ea06694cc485fe945e060a843 Author: Volkmar W. Pogatzki <gentoo@pogatzki.net> AuthorDate: 2023-08-16 18:33:15 +0000 Commit: Miroslav Šulc <fordfrog@gentoo.org> CommitDate: 2023-09-19 14:10:27 +0000 app-text/pdftk: build with bcprov:1.74 Closes: https://bugs.gentoo.org/912247 Signed-off-by: Volkmar W. Pogatzki <gentoo@pogatzki.net> Signed-off-by: Miroslav Šulc <fordfrog@gentoo.org> app-text/pdftk/pdftk-3.3.3-r1.ebuild | 83 ++++++++++++++++++++++++++++++++++++ 1 file changed, 83 insertions(+) Additionally, it has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=901da761770cc5e16a9303ddcb0722f5b3654773 commit 901da761770cc5e16a9303ddcb0722f5b3654773 Author: Volkmar W. Pogatzki <gentoo@pogatzki.net> AuthorDate: 2023-08-15 05:41:31 +0000 Commit: Miroslav Šulc <fordfrog@gentoo.org> CommitDate: 2023-09-19 14:10:22 +0000 dev-java/bcprov: add 1.74 Special slot for consumers using deprecated methods which were removed in version 1.75. Bug: https://bugs.gentoo.org/912248 Bug: https://bugs.gentoo.org/912247 Closes: https://bugs.gentoo.org/797634 Signed-off-by: Volkmar W. Pogatzki <gentoo@pogatzki.net> Signed-off-by: Miroslav Šulc <fordfrog@gentoo.org> dev-java/bcprov/Manifest | 2 + dev-java/bcprov/bcprov-1.74.ebuild | 106 +++++++++++++++++++++++++++++++++++++ dev-java/bcprov/metadata.xml | 3 ++ 3 files changed, 111 insertions(+)
