Re: Bash md5sum not matching

On Sat, 2025-08-02 at 13:11 -0500, Bruce Dubbs wrote:
> On 8/2/25 7:30 AM, Xi Ruoyao ([email protected] via lfs-support Mailing List) wrote:
> > On Sat, 2025-08-02 at 12:24 +0000, md wrote:
> > > Hi,
> > > 
> > > It looks like the md5sum of bash is not matching.
> > > I'm using the latest trunk
> > > 
> > > git show --oneline --no-abbrev --shortstat
> > > f8e7537a1f8b83211fe09f8007a15c36bbf9ef47 (HEAD -> trunk, origin/trunk, origin/
> > > HEAD) gcc-pass2: Drop glibc-2.42
> > > 
> > > grep bash-md5 packages.ent
> > > <!ENTITY bash-md5 "4c7fb7d82586f93ab1d833ef20378ee8">
> > > 
> > > wget https://ftp.gnu.org/gnu/bash/bash-5.3.tar.gz
> > > --2025-08-02 05:59:05--  https://ftp.gnu.org/gnu/bash/bash-5.3.tar.gz
> > > Resolving ftp.gnu.org (ftp.gnu.org)... 209.51.188.20, 2001:470:142:3::b
> > > Connecting to ftp.gnu.org (ftp.gnu.org)|209.51.188.20|:443... connected.
> > > HTTP request sent, awaiting response... 200 OK
> > > Length: 11355854 (11M) [application/x-gzip]
> > > Saving to: ‘bash-5.3.tar.gz’
> > > 
> > > bash-5.3.tar.gz            100%[========================================>]
> > > 10.83M   893KB/s    in 7.8s
> > > 
> > > 2025-08-02 05:59:14 (1.38 MB/s) - ‘bash-5.3.tar.gz’ saved [11355854/11355854]
> > > 
> > > md5sum bash-5.3.tar.gz
> > > 977c8c0c5ae6309191e7768e28ebc951  bash-5.3.tar.gz
> > 
> > It looks like the upstream has made a stealth update including a
> > Georgian translation change.  I'll ask the upstream if it's intentional.
> 
> Indeed.
> 
> -rw-rw-r-- 1 bdubbs bdubbs 11354270 Jul  3 14:59 bash-5.3.tar.gz
> -rw-rw-r-- 1 bdubbs bdubbs 11355854 Jul 30 09:07 bash-5.3.tar.gz.1
> 
> I did a diff between the two versions:
> 
> diff -Naur bash-5.3-orig bash-5.3|grep -a +++
> +++ bash-5.3/po/ka.gmo    2025-07-30 08:27:39.000000000 -0500
> +++ bash-5.3/po/stamp-po  2025-07-30 08:27:52.000000000 -0500
> 
> I have updated the md5sum in the book's xml.  It will be published in the overnight 
> build.

Per the upstream:

    It was changed as the result of this report
    https://lists.gnu.org/archive/html/bug-bash/2025-07/msg00145.html

The upstream has claimed to "figure something out if this happens again"
instead of doing a stealth update.

-- 
Xi Ruoyao <[email protected]>

-- 
http://lists.linuxfromscratch.org/sympa/info/lfs-support
Unsubscribe: See the above information page