Skip to Content.
Sympa Menu

sm-grimoire - [SM-Grimoire] Re: same version - different content

sm-grimoire AT lists.ibiblio.org

Subject: Discussion of Spells and Grimoire items

List archive

Chronological Thread  
  • From: Ladislav Hagara <hgr AT vabo.cz>
  • To: nessus AT list.nessus.org, Source Mage - Grimoire <sm-grimoire AT lists.ibiblio.org>
  • Cc:
  • Subject: [SM-Grimoire] Re: same version - different content
  • Date: Sat, 17 May 2003 14:09:30 +0200

> > According to http://www.nessus.org/news.html Nessus 2.0.5 has been
> > released
> > on May 5th.
> > I downloaded it and installed it, all was O.K.
> > I created md5 of nessus sources and included them in our distro
> > (www.sourcemage.org).
> >
> > I was warned today that my md5 are wrong.
> > After I looked it over I found out that nessus sources were changed on
> > 2003/05/09 but their versions are still the same.
> > >From ChangeLog for nessus-core:
> > $Id: CHANGES,v 1.292 2003/05/09 21:26:13 renaud Exp $
> >
> > Is it normal for nessus developers ?
> > Do not be better to change version number too, for example 2.0.5a ?

> The tarballs have been re-made a few hours after the initial release
> which had not been announced.
>
> I usually don't do that, but increasing the version number for such a
> minor issue made no sense.
>
> -- Renaud

It depends.
Source Mage is source based linux distro.
All sources are downloaded from their authors' web pages (or mirrors).
We can not guarantee software authors' web pages are not faked.
We use MD5 (downloaded from our web page) to verify sources downloaded from
anywhere.
If we have MD5 of nessus-2.0.5 and users downloaded newer nessus-2.0.5 they
are
confused,
they can think for example sources content trojan horse.

I can see you offer signed MD5 of your sources. Probably we will have to use
them.
Thanks for nessus.

- ladislav hagara -
- http://www.sourcemage.org -





Archive powered by MHonArc 2.6.24.

Top of Page