gtk-xfce-engine MD5 sum problem

[LiNuCe]

Hello !

   XFCE 4.2.2 is provided with gtk-xfce-engine 2.2.7. The
gtk-xfce-engine archive (gtk-xfce-engine-2.2.7.tar.gz) has the
following MD5 sum : f9d592aa714bb003b6b012aa9002bbf7. You can verify
it at :

      http://www.xfce.org/archive/xfce-4.2.2/src/xfce-4.2.2.md5

   XFCE 4.2.3 is provided with gtk-xfce-engine 2.2.7. The
gtk-xfce-engine archive (gtk-xfce-engine-2.2.7.tar.gz) has the
following MD5 sum : eca9e95902d2cf1498e1fd478e4afb1b. You can verify
it at :

      http://www.xfce.org/archive/xfce-4.2.3/src/xfce-4.2.3.md5

   It seems there is something wrong as both archives should have the
same MD5 sum. As we are talking about integrity, why not signing the
*.md5 file for the whole XFCE archives with GPG to also ensure
authenticity ?

   Have a nice day !

-- 
Lucien Nardini (aka LiNuCe)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://mail.xfce.org/pipermail/xfce4-dev/attachments/20051107/d6b8855e/attachment.pgp>