Old TeXShop checksum issue rears its ugly head again

[Dave Allured - NOAA Affiliate]

Stealth upgrade detected.  This means the TeXShop developers changed their
published source code file without changing the file name.  Version 5.02
was published on September 2.  Checksums in the Macports portfile were last
fixed on September 5.  Then the upstream developers changed the source code
file on September 9.  Please read more about this in the Macports FAQ,
"stealth upgrade".

Macports tracks published source code files and uses checksums as a
security measure to avoid tampering.  It would be constructive if you would
contact the TeXShop developers and ask them to change the file name every
time they make any change to a published source code file.  They could bump
the version number, or add a suffix, or something.

In the future, you can detect a stealth upgrade yourself, by downloading
the source code file directly from the source website, and looking for
signs of changes after the portfile was last updated.  "There is more than
one way to do this."  When you find a stealth update, please notify the
port maintainers by filing a Trac ticket.

It looks like the port maintainers are responsive and will fix this
portfile soon.  If you like, you can try to fix your own local copy of the
portfile, so that you can complete your TeXShop installation.


On Fri, Sep 16, 2022 at 5:08 AM Gregory Dodwell <gregreedee at gmail.com>
wrote:

> Macports base version 2.7.2
> Mac OS 12.6
> XCode 14 with Command-line tools installed.
> M1 Macbook Pro
>
> After performing my regular sudo port selfupdate; sudo port upgrade
> outdated maintenance routine I get TeXShop checksum errors.
>
> Cleaning and reinstalling TeXShop doesn't help.
>
> TeXShop is crucial for my role as a voluntary secretary for my local
> primary school P&C (I set the agendas in LaTeX, using texmaker).
>
> Here's what the log says:
>
> " ...
> version:1
> :debug:main Starting logging for TeXShop @5.02_0
> :debug:sysinfo macOS 12.6 (darwin/21.6.0) arch arm
> :debug:sysinfo MacPorts 2.7.2
> :debug:sysinfo Xcode 14.0
> :debug:sysinfo SDK 12
> :debug:sysinfo MACOSX_DEPLOYMENT_TARGET: 12.0
> :debug:main Found Dependency: path: /usr/bin filename: unzip regex: ^unzip$
> :msg:main --->  Computing dependencies for TeXShop:info:main .:debug:main
> TeXShop has no conflicts
> :debug:main Found Dependency: path: /usr/bin filename: unzip regex: ^unzip$
> :debug:main Searching for dependency: unzip
> :debug:main Didn't find receipt, going to depspec regex for: unzip
> :debug:main Found Dependency: path: /usr/bin filename: unzip regex: ^unzip$
> :debug:main Executing org.macports.main (TeXShop)
> :debug:main dropping privileges: euid changed to 503, egid changed to 502.
> :debug:archivefetch archivefetch phase started at Fri Sep 16 20:41:05 AEST
> 2022
> :msg:archivefetch --->  Fetching archive for TeXShop
> :debug:archivefetch Executing org.macports.archivefetch (TeXShop)
> :debug:archivefetch euid/egid changed to: 0/0
> :debug:archivefetch chowned /opt/local/var/macports/incoming to macports
> :debug:archivefetch euid/egid changed to: 503/502
> :info:archivefetch --->  TeXShop-5.02_0.darwin_21.arm64.tbz2 doesn't seem
> to exist in /opt/local/var/macports/incoming/verified
> :msg:archivefetch --->  Attempting to fetch
> TeXShop-5.02_0.darwin_21.arm64.tbz2 from
> https://packages.macports.org/TeXShop
> :debug:archivefetch Fetching archive failed: The requested URL returned
> error: 404
> :msg:archivefetch --->  Attempting to fetch
> TeXShop-5.02_0.darwin_21.arm64.tbz2 from
> https://ywg.ca.packages.macports.org/mirror/macports/packages/TeXShop
> :debug:archivefetch Fetching archive failed: The requested URL returned
> error: 404
> :msg:archivefetch --->  Attempting to fetch
> TeXShop-5.02_0.darwin_21.arm64.tbz2 from
> https://kmq.jp.packages.macports.org/TeXShop
> :debug:archivefetch Fetching archive failed: The requested URL returned
> error: 404
> :debug:archivefetch Privilege de-escalation not attempted as not running
> as root.
> :debug:fetch fetch phase started at Fri Sep 16 20:41:08 AEST 2022
> :notice:fetch --->  Fetching distfiles for TeXShop
> :debug:fetch Executing org.macports.fetch (TeXShop)
> :debug:fetch Privilege de-escalation not attempted as not running as root.
> :debug:checksum checksum phase started at Fri Sep 16 20:41:08 AEST 2022
> :notice:checksum --->  Verifying checksums for TeXShop
> :debug:checksum Executing org.macports.checksum (TeXShop)
> :info:checksum --->  Checksumming texshopsource502.zip
> :debug:checksum Calculated (rmd160) is
> ae8bccdf9ad901070fec3d4f25b426b2415f1279
> :error:checksum Checksum (rmd160) mismatch for texshopsource502.zip
> :info:checksum Portfile checksum: texshopsource502.zip rmd160
> a5d51d8d3f015b8dc588f903e2c7b5eb323384df
> :info:checksum Distfile checksum: texshopsource502.zip rmd160
> ae8bccdf9ad901070fec3d4f25b426b2415f1279
> :debug:checksum Calculated (sha256) is
> c257ec0d870a5925ff92298ae67edcb40b5b87e842f0f60a67d890826e705251
> :error:checksum Checksum (sha256) mismatch for texshopsource502.zip
> :info:checksum Portfile checksum: texshopsource502.zip sha256
> 96c7af2c099b22d47b544eaafda642439f774cdd5859f11d5c68cce95f02b374
> :info:checksum Distfile checksum: texshopsource502.zip sha256
> c257ec0d870a5925ff92298ae67edcb40b5b87e842f0f60a67d890826e705251
> :debug:checksum Calculated (size) is 171806461
> :error:checksum Checksum (size) mismatch for texshopsource502.zip
> :info:checksum Portfile checksum: texshopsource502.zip size 171794435
> :info:checksum Distfile checksum: texshopsource502.zip size 171806461
> :info:checksum The correct checksum line may be:
> :info:checksum checksums           rmd160
>  ae8bccdf9ad901070fec3d4f25b426b2415f1279 \
> :info:checksum                     sha256
>  c257ec0d870a5925ff92298ae67edcb40b5b87e842f0f60a67d890826e705251 \
> :info:checksum                     size    171806461
> :error:checksum Failed to checksum TeXShop: Unable to verify file checksums
> :debug:checksum Error code: NONE
> :debug:checksum Backtrace: Unable to verify file checksums
> :debug:checksum     while executing
> :debug:checksum "$procedure $targetname"
> :error:checksum See
> /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_aqua_TeXShop/TeXShop/main.log
> for details.
> ..."
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macports.org/pipermail/macports-users/attachments/20220916/c8d39f66/attachment.htm>