[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: emacs-24.5-rc3.tar.xz modified in place

From: Andreas Schwab
Subject: Re: emacs-24.5-rc3.tar.xz modified in place
Date: Fri, 10 Apr 2015 11:50:45 +0200
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux)

Eli Zaretskii <address@hidden> writes:

>> From: Nicolas Petton <address@hidden>
>> Date: Fri, 10 Apr 2015 00:36:19 +0200
>> Cc: address@hidden
>> > I've downloaded emacs-24.5-rc3.tar.xz and the corresponding .sig from
>> > alpha.gnu.org twice, and they are different.  Both are signed by Nicolas
>> > Petton's public key (7C207910).  See below for the differences.
>> >
>> > It's bad practice to modify tarball releases without changing the
>> > version number.  Please don't do it.  Among other things, it breaks
>> > distributions such as GNU Guix that include cryptographic hashes of all
>> > source tarballs.
>> I'm sorry, that's my fault.
> No, it isn't.  There's no fault to begin with.

Yes, there is.  If a tarball needs to be replaced for whatever reason,
it *must* get a new file name.


Andreas Schwab, address@hidden
GPG Key fingerprint = 58CA 54C7 6D53 942B 1756  01D3 44D5 214B 8276 4ED5
"And now for something completely different."

reply via email to

[Prev in Thread] Current Thread [Next in Thread]