On 7/31/25 12:25 PM, Ross Burton wrote:
I will republish the tar files.

In the future, could you create a new point release instead of regenerating the 
tarball?

Most distros checksum the tarballs for security purposes, and silently swapping 
the tarball looks a lot like a supply-chain attack.

I'll figure something out if this happens again.

--
``The lyf so short, the craft so long to lerne.'' - Chaucer
                 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, UTech, CWRU    c...@case.edu    http://tiswww.cwru.edu/~chet/

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to