cdf @3.4.1 checksum error - possible stealth upgrade?

[p-bro]

Port upgrade/install fails for cdf with a checksum error. I did not succeed in obtaining an earlier version of the package to compare, so I cannot say whether this is a stealth upgrade or not.

After port selfupdate and port clean cdf the install still fails with a checksum error.

sudo port -v install cdf
--->  Computing dependencies for cdf.
--->  Fetching archive for cdf
--->  cdf-3.4.1_0+gcc45.darwin_11.x86_64.tbz2 doesn't seem to exist in /opt/local/var/macports/incoming/verified
--->  Attempting to fetch cdf-3.4.1_0+gcc45.darwin_11.x86_64.tbz2 from http://packages.macports.org/cdf
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
--->  Fetching distfiles for cdf
--->  cdf34_1-dist-all.tar.gz doesn't seem to exist in /opt/local/var/macports/distfiles/cdf
--->  Attempting to fetch cdf34_1-dist-all.tar.gz from ftp://cdaweb.gsfc.nasa.gov/pub/cdf/dist/cdf34_1/unix
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 1718k  100 1718k    0     0   710k      0  0:00:02  0:00:02 --:--:--  750k
--->  Verifying checksum(s) for cdf
--->  Checksumming cdf34_1-dist-all.tar.gz
Error: Checksum (rmd160) mismatch for cdf34_1-dist-all.tar.gz
Portfile checksum: cdf34_1-dist-all.tar.gz rmd160 4e3ebd5892c63db07a9f33fca9a3527883c5e09a
Distfile checksum: cdf34_1-dist-all.tar.gz rmd160 e6783d91886bc99869f1e01eba80f22cf70a07d3
Error: Checksum (sha256) mismatch for cdf34_1-dist-all.tar.gz
Portfile checksum: cdf34_1-dist-all.tar.gz sha256 a8779a3c34c7aa123e6231960db21a5c321baf09f1725319bf358b05af58b666
Distfile checksum: cdf34_1-dist-all.tar.gz sha256 460b56dd82b900c0b2893c61240ffd83d875457c99de3ebf4e2ad222157625f4
The correct checksum line may be:
checksums           rmd160  e6783d91886bc99869f1e01eba80f22cf70a07d3 \
                    sha256  460b56dd82b900c0b2893c61240ffd83d875457c99de3ebf4e2ad222157625f4
Error: org.macports.checksum for port cdf returned: Unable to verify file checksums
Warning: targets not executed for cdf: org.macports.activate \
    org.macports.checksum org.macports.extract org.macports.patch \ 
    org.macports.configure org.macports.build org.macports.destroot \ 
 org.macports.install
Please see the log file for port cdf for details:
    /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_science_cdf/cdf/main.log
To report a bug, follow the instructions in the guide:
    http://guide.macports.org/#project.tickets
Error: Processing of port cdf failed

The downloaded tarball looks like a proper archive of cdf, and the MD5 checksum agrees with the one ​published on the ​cdf FTP server. The files on the cdf FTP server were last modified yesterday, however the ​CHANGES.txt does not give any indication of that change.

Logfile is attached.

[p-bro]

Log file of sudo port -v install cdf

[ryandesign (Ryan Carsten Schmidt)]

The only change between the 3.4.1 on distfiles.macports.org and the one on their server now is fixing a typo in the CHANGES.txt file.

[ryandesign (Ryan Carsten Schmidt)]

r94800