search

pypy / pypy

PyPy is a very fast and compliant implementation of the Python language.
https://pypy.org
Other
790 stars 38 forks source link

Checksum change for pypy3.9 and pypy3.10 #4919

Closed p-linnane closed 3 months ago

p-linnane commented 3 months ago

Hello 👋 . I'm a maintainer for the Homebrew project. While updating some resources in our pypy formulae, we noticed the checksums we had for pypy3.9 and pypy3.10 have changed. I'm just looking for confirmation that the files were intentionally changed, so that we can rule out any malicious tampering. Thanks!

pypy3.9: https://downloads.python.org/pypy/pypy3.9-v7.3.15-src.tar.bz2 Previous: e42c16593dd2d8e30ffa6287660c6984562bf4e9f95e660706e16764dfec85a8 Current: 6bb9537d85aa7ad13c0aad2e41ff7fd55080bc9b4d1361b8f502df51db816e18

pypy3.10: https://downloads.python.org/pypy/pypy3.10-v7.3.15-src.tar.bz2 Previous: 48ce19ca7642131b8468ddfb7ef355f49952518702ab501e2c6b3d9b4eb09ad4 Current: 837622130b36603a1893899bd9f529961a8e4a56c9eb67268d72ddf8920c9579

mattip commented 3 months ago

The checksums were modified on Jan 15, a few hours after the release, because the files were not compressed, see https://github.com/pypy/pypy/issues/4861. The current ones you list are correct. Do you have some automation that grabbed the sources as they were released and missed the update?

p-linnane commented 3 months ago

Thank you for the confirmation. In this case, a user submitted PR's when the releases were made.