[kstars] [Bug 458351] New: [macOS] trustworthy code-signed download was replaced with a completely unsigned binary

bugzilla_noreply at kde.org bugzilla_noreply at kde.org
Fri Aug 26 19:21:37 BST 2022


https://bugs.kde.org/show_bug.cgi?id=458351

            Bug ID: 458351
           Summary: [macOS] trustworthy code-signed download was replaced
                    with a completely unsigned binary
           Product: kstars
           Version: 3.6.0
          Platform: macOS (DMG)
                OS: macOS
            Status: REPORTED
          Severity: major
          Priority: NOR
         Component: general
          Assignee: mutlaqja at ikarustech.com
          Reporter: autoreleasepool at gmail.com
  Target Milestone: ---

up until recently the KStars 3.6.0 download from here
https://www.indilib.org/jdownloads/kstars/kstars-3.6.0.dmg
was a properly code-signed and trustworthy binary that was officially signed by
Developer ID: K Desktop Environment e.V. (5433B4KXM8)
the hash of the file was
2c4c72a39b6320c68341b42f0cce3a8cf28fde188e5184da40c5af127bd2be23


now it suddenly is a untrustworthy and completely unsigned binary with the hash
122f0a8f9eb439a322d47e1d2902183b3020049342f652e3fe3ea06561f99525

what happened? were you hacked?

-- 
You are receiving this mail because:
You are watching all bug changes.



More information about the kde-mac mailing list