[postgis-devel] [geos-devel] GEOS 3.4.0 is out

Greg Troxel gdt at ir.bbn.com
Sun Aug 11 05:19:47 PDT 2013


[omitting comment on the actual issue]

  > In any case we need to fix this ASAP. Maybe we can call it a packaging
  > issue and just re-generate the tar.bz2, without changing version, what
  > do you think ?

Please do not do that.  Packaging systems really object to having two
distfiles with the same name and different contents, because it is
indistiguishable from an attack.  To detect such issues, packaging
systems store a hash with the name of the distfile, and check it on
download.

If you have to change the tarball once it has hit a download area, then
please just bump to 3.4.1.  There are an infinite number of version
numbers available.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/postgis-devel/attachments/20130811/29d490c1/attachment.sig>


More information about the postgis-devel mailing list