From: Alan Barrett <barrett@daisy.ee.und.ac.za>
Date: Sun, 7 Nov 93 02:33:27 PST
To: Carl Ellison <cme@sw.stratus.com>
Subject: Re: Warning for PGP Users!
In-Reply-To: <199311061605.LAA05613@ellisun.sw.stratus.com>
Message-ID: <Pine.3.03.9311071239.m459-a100000@daisy.ee.und.ac.za>
MIME-Version: 1.0
Content-Type: text/plain


> I checked the .tar file at soda.berkeley.edu and the sources have
> several mismatching MD5s.  Is anyone looking at this?

Yes, the PGP 2.3A distribution has incorrect MD5 values in
contrib/md5sum/pgp23.md5. I think that they were not updated to acount for
the changes between versions 2.3 and 2.3A. 

Nevertheless, the file pgp23sigA.asc (which is distributed separately from
the .tar.Z and .zip files) contains good detached signatures from Colin
Plumb, covering the various .zip and .tar.Z files for PGP 2.3A.  

--apb (Alan Barrett)