Bug 366303 – [overlay] kdeedu 4.6.3 tarball has incorrect size/checksums

• Product: Gentoo Linux
• Status: RESOLVED WONTFIX

[Description Duncan 2011-05-07 02:08:35 UTC]

(Overlay synced minutes ago to verify.)

All KMNAME="kdeedu" 4.6.3 packages need remanifest-ed, as the released kdeedu 4.6.3 tarball size and sha1 as published by kde-upstream (at least as viewed from here) doesn't match the one in the packages.  Apparently there was a last-minute update, upstream.

Either that or I'm being seriously MitMed, for both the kde web page listing the tarball sha1s and the tarball itself (or for the overlay git sync).

From http://kde.org/info/4.6.3.php (location size sha1):

kdeedu-4.6.3  69MB  4b27e6e1670760982dae13dc8c51c814c6853396

From the overlay's marble manifest (wrapped line, I checked kalgebra as well, same issue, so appears to apply to all kdeedu packages):

DIST kdeedu-4.6.3.tar.bz2 71703673 
RMD160 cdd1929047fc825fb7c0042b2a6e620b18f7b0b1 
SHA1 e3b84814dfc95ab4cf8ce8b15d6ed89405ef2651 
SHA256 bb594d1435297c05ed74344503b1485355d4d9337db7699414c841f3186e50db

[Comment 1 Duncan 2011-05-07 02:15:29 UTC]

BTW, since the upgrade, all bugzilla changes seem to be double-submitted.  I've had several "mid-air collisions" detected, that were from me for the exact-same operation!  One time might have been accidental double-click, but several?  I suspect it's a konqueror bug that will need verified and filed later, but thought I'd mention it, since it just happened on this bug, too.

[Comment 2 Duncan 2011-05-07 03:54:04 UTC]

(In reply to comment #1)
> BTW, since the upgrade, all bugzilla changes seem to be double-submitted.

That one appears to be upstream kde bug #272466

https://bugs.kde.org/show_bug.cgi?id=272466

[Comment 3 Tomáš Chvátal (RETIRED) 2011-05-07 08:01:45 UTC]

It is masked for damn reason, as i stated multiple time, WAIT for us to move it to main tree every time.