From users-return-4295-apmail-groovy-users-archive=groovy.apache.org@groovy.apache.org Thu Apr 9 22:55:18 2020 Return-Path: X-Original-To: apmail-groovy-users-archive@minotaur.apache.org Delivered-To: apmail-groovy-users-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by minotaur.apache.org (Postfix) with SMTP id 0F2BD19C84 for ; Thu, 9 Apr 2020 22:55:17 +0000 (UTC) Received: (qmail 67895 invoked by uid 500); 9 Apr 2020 22:55:17 -0000 Delivered-To: apmail-groovy-users-archive@groovy.apache.org Received: (qmail 67874 invoked by uid 500); 9 Apr 2020 22:55:16 -0000 Mailing-List: contact users-help@groovy.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@groovy.apache.org Delivered-To: mailing list users@groovy.apache.org Received: (qmail 67864 invoked by uid 99); 9 Apr 2020 22:55:16 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 09 Apr 2020 22:55:16 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 162CEC05B0 for ; Thu, 9 Apr 2020 22:55:16 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0.453 X-Spam-Level: X-Spam-Status: No, score=0.453 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.2, KAM_LOTSOFHASH=0.25, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=asert-com-au.20150623.gappssmtp.com Received: from mx1-he-de.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id cAT9A5qmiWR6 for ; Thu, 9 Apr 2020 22:55:14 +0000 (UTC) Received-SPF: None (mailfrom) identity=mailfrom; client-ip=2a00:1450:4864:20::52b; helo=mail-ed1-x52b.google.com; envelope-from=paulk@asert.com.au; receiver= Received: from mail-ed1-x52b.google.com (mail-ed1-x52b.google.com [IPv6:2a00:1450:4864:20::52b]) by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 4E37D7FA88 for ; Thu, 9 Apr 2020 22:55:13 +0000 (UTC) Received: by mail-ed1-x52b.google.com with SMTP id e5so267184edq.5 for ; Thu, 09 Apr 2020 15:55:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=asert-com-au.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:reply-to:from:date:message-id :subject:to; bh=rVneps6UOadUD3PUPl6+WiTNSpdS0ZnMhHFDNujZkbo=; b=BIMu+s1u8JpD2tp55/4QweXfpG0kRg1EYrx7AM/56d0UFlsu/OLcD86DVdzJDmxItq R8MqaIGRWt9DLM5zT+mklmjMu0Aoe+f7rQdLK0SUtQvmnYo0dsEFTf/CSV4EbS9rgOBS S1YnaSP/HKloP5GGfMkW+yQ48f0y1ehPR8d4SIi3+S7/Q1d90UNEDM59Blt/EmIr3A5m Aotowm+z75a/TDua8rEsZ18jbbPg7x0H31UohMieOhjDtMcBY7ClVMoQgZq5/342HK7f q4eV0prFjADNZx6lDbXlSO5v7n2syMyHvXD3pfkV+oWiviUKBbnfNBzZVypFrtZ6LCoq 489g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:reply-to :from:date:message-id:subject:to; bh=rVneps6UOadUD3PUPl6+WiTNSpdS0ZnMhHFDNujZkbo=; b=gNXw9HNyNXnZCVcRX8OFoF8zW5zTBpL3z4n/Id0jTCUgjjL611omNlgB6i7IbPRbdu kgywf2mOxrEPHZiB8yY9n+VJDG7iUDNPD0qtSBeqEMJEd87GqtKh3D0b5iE+clsc6asj 2APP8Ek1FvJXDVkPCpNY5nPa3Er+7pVNf1gtJ2ZV23kDEKnqRvgx3lF3sYw+6GKENhLY CpfFzjw1lJjLLnBYEAIi+noTs+BpODucT7zkttelrr2Zo/s8GzWbk5bpMkIKvAu9ud1x QAafYWcqXINuyeppR5TSEuQ8GpBJEciWGbIrdaf3K0GQkBzBbGctXM0WzXLCCxeq/pMU iZ1w== X-Gm-Message-State: AGi0PuZUKozhGwfFyAwCeDobMOt9NKrJDQ+/SbmzzLcm3dHbIsXTbts3 Q8IE5IU1RTWkVLwWKZrdqkpb2KjoELOOKIJMSqiE8w1OxForkg== X-Google-Smtp-Source: APiQypIf9SgIWppvRYNIgrhMx/pn0oHpEqlP3cyz0WiQ3uCM8OZ1SkggEAHMmMIMq399dal/znZsa8r8tszDKgns4/4= X-Received: by 2002:a17:906:6992:: with SMTP id i18mr1212499ejr.293.1586472913226; Thu, 09 Apr 2020 15:55:13 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: Reply-To: paulk@asert.com.au From: Paul King Date: Fri, 10 Apr 2020 08:55:04 +1000 Message-ID: Subject: Re: Incorrect hash To: users@groovy.apache.org Content-Type: multipart/alternative; boundary="000000000000705f6a05a2e38225" --000000000000705f6a05a2e38225 Content-Type: text/plain; charset="UTF-8" This looks like a glitch in our release process. The timestamps in the zip (and sha256 file) on downloads.apache.org have changed but nothing else. I'll see what I can do to correct this. In the meantime you can use the checksum at: https://dl.bintray.com/groovy/maven/apache-groovy-binary-2.4.19.zip.sha256 On Fri, Apr 10, 2020 at 7:31 AM alessio wrote: > Hello, > > either the binaries have been compromised or an incorrect hash was > published. > > The hash published at > > https://downloads.apache.org/groovy/2.4.19/distribution/apache-groovy-binary-2.4.19.zip.sha256 > is > > b6a6a7819bd7e222756f9dba1d62d933f217d5e491f0e82ddddfde9df8222f54 > > whereas the actual hash of > https://dl.bintray.com/groovy/maven/apache-groovy-binary-2.4.19.zip is > > 24517ee43881ee52ccd52996ac3d298f0eb000ac36d59d59c2e5ef0c3ef9eb88 > --000000000000705f6a05a2e38225 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
This looks like a glitch in our release process. The times= tamps in the zip (and sha256 file) on downloads.apache.org have changed but nothing else. I'll see wha= t I can do to correct this.
In the meantime you can use the checksum at= :


On Fri, Apr 10, 2020 at= 7:31 AM alessio <alessino@gmail.c= om> wrote:
https:= //downloads.apache.org/groovy/2.4.19/distribution/apache-groovy-binary-2.4.= 19.zip.sha256
is

=C2=A0 b6a6a7819bd7e222756f9dba1d62d933f217d5e491f0e82ddddfde9df8222f54

whereas the actual hash of
https://dl.bintray.com/groovy/mav= en/apache-groovy-binary-2.4.19.zip is

=C2=A0 24517ee43881ee52ccd52996ac3d298f0eb000ac36d59d59c2e5ef0c3ef9eb88
--000000000000705f6a05a2e38225--