Hey, they (GNU-binutils) once silently replaced the binutils-2.20.1 archive with the 2.20.1a version. This was an unfortunate move, since it triggered lot's of confusion (as you're experiencing now..) - OpenEmbedded e.g. head to deal with the situation as well (http://patches.openembedded.org/patch/11149/). There were some threads/posts about this on the binutils mailinglist as well -> no attack However, actually I thought the checksums got replaced that time, will check.
mirko On 06/03/2012 02:31 PM, Daniel A. Nagy wrote: > Hi, > > When trying to do a build from backfire branch, many of the sources of > GNU binutils used for the cross-compiling environment complain about md5 > mismatch. Eventually it does download a binutils-2.19.1.tar.bz2 file > that it likes (md5 checksum: 09a8c5821a2dfdbb20665bc0bd680791), but > quite a few attempts fail before it and not because of network errors. > Are there different legitimate versions of 2.19.1 out there or is it an > attack? Any ideas? > > > > > _______________________________________________ > openwrt-devel mailing list > openwrt-devel@lists.openwrt.org > https://lists.openwrt.org/mailman/listinfo/openwrt-devel _______________________________________________ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
