full-disclosure - apache.org files are infected?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri Jul 22 11:41:56 2005
From: christopher.kunz at hardened-php.net (Christopher Kunz)
Subject: apache.org files are infected?

Seven King wrote:
> md5sum against a tar.gz file from:
> http://www.apache.org/dist/apr/apr-1.0.1.tar.gz
> turns out to be:
> 500307fff221dc100e04d8e9843068a4
> instead of
> http://www.apache.org/dist/apr/apr-1.0.1.tar.gz.md5
>
Probably a bit shifted during your download:

/tmp$ md5sum apr-1.0.1.tar.gz
0a3cb911ea1823cfa3e5863892774705  apr-1.0.1.tar.gz

Looks good to me.

--ck