#33411: Django 2.2.26 tarball on PyPI differs from djangoproject.org
-----------------------------------------+------------------------
Reporter: mbakke | Owner: nobody
Type: Uncategorized | Status: new
Component: Packaging | Version: 2.2
Severity: Normal | Keywords:
Triage Stage: Unreviewed | Has patch: 0
Needs documentation: 0 | Needs tests: 0
Patch needs improvement: 0 | Easy pickings: 0
UI/UX: 0 |
-----------------------------------------+------------------------
PyPI is serving a different tarball than djangoproject.org for 2.2.26.
{{{
a84c71495d12388ea3e7cb271ba0b6c020e51831477a65e7cd00fe1cce80d103
Django-2.2.26.tar.gz
dfa537267d52c6243a62b32855a744ca83c37c70600aacffbfd98bc5d6d8518f
Django-2.2.26.tar.gz.pypi
}}}
The only difference is in gzip compression metadata:
{{{
$ file Django-2.2.26.tar.gz*
Django-2.2.26.tar.gz: gzip compressed data, was "Django-2.2.26.tar",
last modified: Tue Jan 4 09:30:26 2022, max compression, original size
modulo 2^32 52469760
Django-2.2.26.tar.gz.pypi: gzip compressed data, was "Django-2.2.26.tar",
last modified: Tue Jan 4 09:40:48 2022, max compression, original size
modulo 2^32 52469760
}}}
The GPG signatures for 2.2.26 on PyPI and djangoproject.org are OK
however.
--
Ticket URL: <https://code.djangoproject.com/ticket/33411>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/049.6832b8bc7ebd715ed9b76e946b3dc1ea%40djangoproject.com.
