On Friday 06 January 2006 01:23, Martin Costabel wrote: > PLinnell wrote: > [] > > > Getting Scribus 1.2.4.1: > > > > You can: > > * Download source tarballs and document templates and some rpms > > from our Sourceforge Download page: > > http://sourceforge.net/project/showfiles.php?group_id=125235"; > > The alternative tarball downloaded from http://www.scribus.org.uk/ > (downloads/1.4.1.1/scribus-1.4.1.1.tar.bz2) seems to be corrupted. > It has the same length as the one from sourceforge, but a different > md5sum, and bunzip2 chokes on it: > > % bunzip2 -tvv scribus-1.2.4.1.tar.bz2 > scribus-1.2.4.1.tar.bz2: > [1: huff+mtf rt+rld] > [2: huff+mtf rt+rld] > [3: huff+mtf rt+rld] > [4: huff+mtf rt+rld] > [5: huff+mtf data integrity (CRC) error in data > > You can use the `bzip2recover' program to attempt to recover > data from undamaged sections of corrupted files.
Hi, Good catch. I have reloaded the tarball and the sha1sum and my gpg signature matches. sha1sum: c7dfc98d35a0524184c0835e8db376bc71f13f05 md5sum d72ffe72b1d9ba1230557692af803927 Ultimate test: gpg --verify ./scribus-1.2.4.1.tar.bz2.sig ./scribus-1.2.4.1.tar.bz2 We take source code and integrity pretty seriously, bordering on foaming at the mouth paranoia... Hence, all these checks. Peter -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://nashi.altmuehlnet.de/pipermail/scribus/attachments/20060106/e7c8d524/attachment.pgp
