On Tue, Jan 04, 2022 at 05:56:46PM -0600, Pete Zaitcev wrote: > On Tue, 4 Jan 2022 23:11:50 +0000 > Jeremy Stanley <fungi at yuggoth.org> wrote: > > > On 2022-01-04 16:13:17 -0600 (-0600), Pete Zaitcev wrote: > > > > [1] https://zaitcev.livejournal.com/263602.html > > > Was the altered code malicious? > > Not at all. It looked like an adaptation to py3 that went wrong. > So, previously, releases were uploaded to tarballs.opendev.org[3], which is not the case anymore. To me it looks like publishing releases on tarballs.... would solve the immediate issue Pete pointed out. Also it would provide an alternate download option. Is that doable? Matthias [3] https://tarballs.opendev.org/openstack/git-review/ -- Matthias Runge <mrunge at matthias-runge.de>