-
Notifications
You must be signed in to change notification settings - Fork 301
Closed
Description
Describe the bug
Hi. I am a maintainer of the Homebrew package manager.
We noticed that the checksum of the 1.1.3 release has changed from 8aab7c6 to baa70eb
This is a major security issue as upstream release checksums are not supposed to change. Did you retag the release (which is something that should never be done, see https://git-scm.com/docs/git-tag#_discussion). Or did someone gain access to your repo?
See Homebrew/homebrew-core#95106 for the issue on our side.
To Reproduce
Compare the checksum of the old and new release.
Expected behavior
No checksum change
Logs
NA
Desktop (please complete the following information):
All OSes
Additional context
NA
QuangTung97, ziemekobel-ef, ifross89, jasdel and ldez
Metadata
Metadata
Assignees
Labels
No labels