MD5s of setup.exe on mirrors.
Fri May 11 21:42:00 GMT 2007

> On Fri, May 11, 2007 at 12:58:59PM -0700, Alexander Sotirov wrote:
>> wrote:
>>> Cygwin mirrors have in their toplevel a setup.exe and an md5.sum. The
>>> m5sum is
>>>   ae1944f528338033bab3b4710d5bd736  setup.bz2
>>>   b31ddcef84f25919a5d3184167b4a90d  setup.exe
>>>   0503889504b7ff0b23e65586a522b3ad  setup.ini
>>> whereas the setup.exe has actually the md5sum:
>>>   fbc848393ed05ef4f51a253f75bcafeb
>>> I checked that for and
>>> and some others.
>>I reported this in January:
>>Nobody seemed to care. Considering the fact that MD5 collisions are now trivial
>>to generate, it probably doesn't matter much anyways - the fact that your copy
>>of setup.exe has the right MD5 doesn't mean that it hasn't been tampered with.
> We don't control the content of mirrors.
> If you think this is an issue, contact the mirror(s) in question.
> cgf

I've only checked some mirrors. Since all have those same setup.exe,
my idea was, that it would be the original (do I even have access to
that -- I think I'm supposed not to dowloed from there?) server which
is also carrying this other executable.

Therefore my advice to check there (and I trust you're controlling the
master server?), but of course I might be totally confused and
mistaking all and everything.

Regards -- Markus

Unsubscribe info:
Problem reports:

More information about the Cygwin mailing list