Re: md5 sums for source files

[Richard Dawe]

Hello.

address@hidden wrote:
> 
> I was recently tasked with rebuilding most/all of the gnu software on the
> system, especially as the gnu site had
> been found to have been hacked.   Is there any place I can go to get md5
> sums for the *.tar.gz  source files?
> I would like some check to ensure that the source I am using has not been
> hacked.

>From the original CERT announcement:

    ftp://ftp.gnu.org/before-2003-08-01.md5sums.asc
    ftp://alpha.gnu.org/before-2003-08-01.md5sums.asc

If these files don't answer you questions, then:

Which tar.gz files do you need the MD5 sums for? I have the announcements from
about fileutils 4.1 onwards, which contain MD5 sums. I can forward you those
announcements, if you want.

Coreutils (the union of fileutils+sh-utils+textutils) annoucements were sent
to coreutils-announce. Perhaps that's archived somewhere.

Bye, Rich =]

-- 
Richard Dawe [ http://www.phekda.freeserve.co.uk/richdawe/ ]

"You can't evaluate a man by logic alone." -- McCoy, "I, Mudd", Star Trek