search

wise-coders / dbschema

DbSchema Database Designer
https://dbschema.com
67 stars 3 forks source link

Change of checksum for v9.2.2 #100

Closed dmcken closed 1 year ago

dmcken commented 1 year ago

  1. Please check DbSchema Help / Output logs for errors. n/a

  2. Please include the DbSchema version, operating system and used database - 9.2.2

  3. The steps to reproduce this issue md5sum the tar.gz output.

Currently a download of the tar.gz file is MD5 summing to c493976a2d91eb379dfd1ce16c015b4c which matches https://dbschema.com/download/md5sums. I use arch and that version was checksum'ed in the AUR as a225e558fb674f93a0ce0468310d1fd3. I'm more than willing to submit a fix to update the checksum to the current but this has the makings of a supply chain attack if someone managed to breach the site.

So I guess I'm just asking for some confirmation that this was an officially sanctioned change or issue in the Arch Linux AUR.

wise-coders commented 1 year ago

I checked, and the file looks fine:

@.:~/website/download$ md5sum DbSchema_unix_9_2_2.tar.gz c493976a2d91eb379dfd1ce16c015b4c  DbSchema_unix_9_2_2.tar.gz @.:~/website/download$ more md5sums 164f55a159c902067f5bc804365f509f DbSchema_9_2_2.exe 28d339d0e442b98f7a55f7123be97207 DbSchema_9_2_2.msi d04b1941c9660aff03d85a8c2787174d DbSchema_9_2_2.zip d5f8d14379728e420c43c8b73d09c02c DbSchema_linux_9_2_2.deb 1ff6bd5f99c565c7de599e4ca49ec5c0 DbSchema_linux_9_2_2.rpm e9515c1aa0be14b82c89ecc0e6feb9df DbSchema_macos_9_2_2.dmg bc82c74900ac23162dd450a34d958500 DbSchema_macos_9_2_2.pkg 5312eaa9eec1ed1fe9d98ab2e389c1c8 DbSchema_macos_9_2_2.tgz 1c14669a7208f90934a805d5429e23b4 DbSchema_unix_9_2_2.sh c493976a2d91eb379dfd1ce16c015b4c DbSchema_unix_9_2_2.tar.gz

We have uploaded some hotpatches on top of the same version. Maybe this is the reason of the error?

Best regards, Dragos Pruteanu

On Monday, April 10, 2023 at 10:05:20 PM, DaveDevelop wrote:

* Please check DbSchema Help / Output logs for errors. n/a

* Please include the DbSchema version, operating system and used database - 9.2.2

* The steps to reproduce this issue md5sum the tar.gz output.

Currently a download of the tar.gz file is MD5 summing to c493976a2d91eb379dfd1ce16c015b4c which matches [1] https://dbschema.com/download/md5sums. I use arch and that version was checksum'ed in the AUR as a225e558fb674f93a0ce0468310d1fd3. I'm more than willing to submit a fix to update the checksum to the current but this has the makings of a supply chain attack if someone managed to breach the site. So I guess I'm just asking for some confirmation that this was an officially sanctioned change or issue in the Arch Linux AUR. — Reply to this email directly, [2] view it on GitHub, or [3] unsubscribe. You are receiving this because you are subscribed to this thread.Message ID:

[1] https://dbschema.com/download/md5sums [2] https://github.com/wise-coders/dbschema/issues/100 [3] https://github.com/notifications/unsubscribe-auth/AOL52Y5JKX6FCXO352BTPB3XARRXNANCNFSM6AAAAAAWZLSACU

dmcken commented 1 year ago

Ok, thank you.