[OE-core] BlueZ old releases have new checksums

[Khem Raj]

On Wed, Jan 4, 2012 at 12:14 PM, Chris Larson <clarson at kergoth.com> wrote:
> On Wed, Jan 4, 2012 at 11:14 AM, Denys Dmytriyenko <denis at denix.org> wrote:
>> The main archive of BlueZ/obexd/hcidump releases on kernel.org[1] finally
>> re-appeared after missing for long time since kernel.org compromise.
>> Unfortunately, all previous tarballs have new checksums, breaking builds for
>> anyone w/o previous copy cached. Old copies were also extensively mirrored,
>> so you never know which one you fetch next time...
>
> Heh, checksums changing after a security compromise, that's worrisome
> :) should diff their contents to see what's going on, or whether its
> just a gzip timestamp change or something.

exactly. Make sure the tars are sane

> --
> Christopher Larson
>
> _______________________________________________
> Openembedded-core mailing list
> Openembedded-core at lists.openembedded.org
> http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core