[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

Steve Dower added the comment: Confirmed. Neither was compromised, the only change was that the previous MSI did not have an embedded Authenticode signature. I didn't even rebuild the MSI, tbh. I went back to my (secure, controlled) build machine and signed it manually. --

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

andrejs-sisojevs-accenture added the comment: Oh, and also (please confirm) that 2841e92ba89a6f036305a8a07fbe9d18 was not security compromised. -- ___ Python tracker ___

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

andrejs-sisojevs-accenture added the comment: Please confirm, that old "2fe86194bb4027be75b29852027f1a79" was valid in past (as opposed to be security compromised). We need to make sure, since some of our devs downloaded and used that version with unconfirmed checksum. --

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

Change by SilentGhost : -- resolution: -> fixed stage: -> resolved status: open -> closed ___ Python tracker ___ ___

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

Benjamin Peterson added the comment: That's correct. -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

SilentGhost added the comment: I still see 2fe86194bb4027be75b29852027f1a79 as checksum -- nosy: +SilentGhost ___ Python tracker ___

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

Benjamin Peterson added the comment: I think everything is correct now? -- ___ Python tracker ___ ___ Python-bugs-list mailing

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

Steve Dower added the comment: I redownloaded and confirmed that the files are correct. Benjamin - the MD5 for the 32-bit installer didn't get updated. It should be 912428345b7e0428544ec4edcdf70286 (as in my updated email I sent). -- ___ Python

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

Steve Dower added the comment: We updated the build to be properly code signed, but the CDN may still be caching the old release. Nothing has changed except the signature on the installer (Python 2 binaries have never been signed). I'll run a CDN purge to try and clear it up. --

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

Karthikeyan Singaravelan added the comment: Strange, when I visit the link again in new tab then it gives me the checksum as described by OP. But I still have the old tab open with which I wrote my comment that has 2841e92ba89a6f036305a8a07fbe9d18 (20348928 bytes) and wget at the time also

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

Jeremy Kloth added the comment: When I visit the provided link, I also see what OP describes. Is it a caching/location issue? I'm in US-Colorado. -- nosy: +jkloth ___ Python tracker

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

Karthikeyan Singaravelan added the comment: The download page linked doesn't contain checksum 2fe86194bb4027be75b29852027f1a79. The checksum in the page is 2841e92ba89a6f036305a8a07fbe9d18 and I can confirm that the downloaded binary also has the correct checksum as below :

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

Change by Karthikeyan Singaravelan : -- nosy: +benjamin.peterson ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

andrejs-sisojevs-accenture added the comment: Checksum for earlier v2.7.15 is fine. -- ___ Python tracker ___ ___ Python-bugs-list

[issue36241] MD5 checksum is not valid for v2.7.16 "Windows x86-64 MSI installer"

New submission from andrejs-sisojevs-accenture : On download page https://www.python.org/downloads/release/python-2716/ MD5 checksum for "Windows x86-64 MSI installer" is 2fe86194bb4027be75b29852027f1a79 But download file checksum is `2841e92ba89a6f036305a8a07fbe9d18`. Checksum calculated on