databases/mongodb 2.4.3 File size mismatch
crees at FreeBSD.org
Sat Apr 27 18:34:54 UTC 2013
On 27 April 2013 18:39, John Marino <dragonflybsd at marino.st> wrote:
> On 4/27/2013 18:29, Lowell Gilbert wrote:
>> klaasdemter at gmail.com writes:
>>> something is wrong with mongodb port, make reports a mismatched file
>>> => Attempting to fetch
>>> fetch: http://downloads.mongodb.org/src/mongodb-src-r2.4.3.tar.gz:
>>> size mismatch: expected 14108201, actual 14108398
>> Looks like the distfile got re-rolled under the same name.
>> In which case it would be safe to just update the distinfo
>> and go ahead with the build.
>> I'm CC'ing the maintainer to update the port and
>> double-check my (very quick) analysis of the security issues.
> The pkgsrc guys make it a point to contact the party responsible for the
> re-roll and polite ask to never, ever do that again because all the
> repositories (ports, pkgsrc, apt, arch, rest of linux, etc) are depending on
> a hash and rerolling breaks all of them.
> Sometimes upstream just doesn't realize the consequences and they'll not do
> it again once informed. Something they just don't care and it keeps
> I am a bit surprised that a database developer that should understand issues
> with data integrity pulls a stunt like that though.
We share that attitude, and encourage maintainers to complain to
upstream when they do this.
More information about the freebsd-ports