Re: GNU Parallel Bug Reports Instillation problems

[William Bader]

>Date: Fri, 27 Jun 2014 10:01:17 -0700

>Subject: Re: GNU Parallel Bug Reports Instillation problems
>From: address@hidden

>

>I ran everything as root user. Such errors include the following (see attachments):
>

>Best,
>Dominic

I get it also.  I usually just download the tar and build it without running the script.  I suspect that the script is bad, but it is possible that someone modified the files.  I use parallel in my software builds but I am not the maintainer.

---

laptop37 /tmp$ curl pi.dk/3/ | bash

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current

                                 Dload  Upload   Total   Spent    Left  Speed

100  4191  100  4191    0     0  17763      0 --:--:-- --:--:-- --:--:-- 17834

bash: line 31: fetch: command not found

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current

                                 Dload  Upload   Total   Spent    Left  Speed

100   313  100   313    0     0    695      0 --:--:-- --:--:-- --:--:--   697

100   334  100   334    0     0    524      0 --:--:-- --:--:-- --:--:--     0

  0     0    0 26717    0     0  29705      0 --:--:-- --:--:-- --:--:-- 29705

gpg: requesting key FFFFFFF1 from hkp server keys.gnupg.net

gpg: key FFFFFFF1: "Ole Tange <address@hidden>" not changed

gpg: Total number processed: 1

gpg:              unchanged: 1

gpg: requesting key 88888888 from hkp server keys.gnupg.net

gpg: key 88888888: "Ole Tange <address@hidden>" not changed

gpg: Total number processed: 1

gpg:              unchanged: 1

The signature on parallel-20140622.tar.bz2 is wrong. This may indicate that a criminal has changed the code.

THIS IS BAD AND THE CODE WILL NOT BE INSTALLED.

See http://git.savannah.gnu.org/cgit/parallel.git/tree/README for other installation methods.

---

This is what I get when I download the files from http://ftp.gnu.org/gnu/parallel/ 

laptop37 ~/Downloads$ ls -l parallel-*

-rw-rw-rw- 1 william william 870857 Jun 27 20:07 parallel-20140622.tar.bz2

-rw-rw-rw- 1 william william   2085 Jun 27 20:07 parallel-20140622.tar.bz2.sig

laptop37 ~/Downloads$ sum parallel-20140622.tar.bz2*

12015   851 parallel-20140622.tar.bz2

50480     3 parallel-20140622.tar.bz2.sig

laptop37 ~/Downloads$ gpg --with-fingerprint parallel-20140622.tar.bz2.sig

gpg: Signature made Mon 23 Jun 2014 03:27:19 AM CEST using RSA key ID 88888888

gpg: Good signature from "Ole Tange <address@hidden>"

gpg:                 aka "Ole Tange <address@hidden>"

gpg:                 aka "[jpeg image of size 6001]"

gpg: WARNING: This key is not certified with a trusted signature!

gpg:          There is no indication that the signature belongs to the owner.

Primary key fingerprint: CDA0 1A42 08C4 F745 0610  7E7B D1AB 4516 8888 8888

William