sha256 checksum value for MuseScore-3.6.1.515739048 is not equal to the one provided in the download page
Hi guys,
Recently I downloaded MuseScore-3.6.1.515739048 from https://musescore.org/en/download/musescore.dmg .
The direct link is: https://cdn.jsdelivr.net/musescore/v3.6.1/MuseScore-3.6.1.515739048.dmg
The sha256 checksum on the download page is: c7c3b315670da22aea88e2b1cff9d0565e7ce9cb81176bd1da066a83860383ac .
But my downloaded file checksum is 860c0cab181bed44df26db058474ae1ed20acefd61a24be87c17189e8ad8513a .
And then I downloaded the same file again, the checksum is still 860c0cab181bed44df26db058474ae1ed20acefd61a24be87c17189e8ad8513a.
I don't think that the file can be corrupted in the same way in downloading process. But I can't make sure that my checksum is right. So for security reason, could you guys help me to validate the file checksum please?
Furthermore, would you consider to add the checksum for each file in future on the Download page: https://musescore.org/en/download
Comments
W.r.t. "would you consider to add the checksum for each file",
I logged #283831: SHA256 checksums only available after downloading 2 years ago.
In reply to W.r.t. "would you consider… by Riaan van Niekerk
Thank you for the reply.
And could you help me to validate the checksum of MuseScore-3.6.1.515739048.dmg for Mac OS? If it's different from the one that listed on the page, then another bug report should be filed.
In reply to Thank you for the reply. And… by zgxkqpfbvp
I got the same same sha256sum as you. The post-download page is definitely incorrect.
One of our senior contributors (Jojo) has made the site admins aware of this issue on the MuseScore Telegram developers chat (https://t.me/musescoreeditorchat) late last week, but you are welcome to file an issue.
In reply to I got the same same… by Riaan van Niekerk
Thank you very much. Now I can delete the duplicated downloaded files.
I will file the issue if it won't be fixed in couples of days.
In reply to Thank you very much. Now I… by zgxkqpfbvp
No need, there's an issue already, see above, still open...
In reply to No need, there's an issue… by Jojo-Schmitz
I am fairly certain these are two different issues.
1 the one I logged a while ago #283831: SHA256 checksums only available after downloading versus
2 the new issue reported by OP, that the checksum on the web page wrong.
@jojo, you made the webside admins aware of no 2.
In reply to I am fairly certain these… by Riaan van Niekerk
I made them aware of the 2nd, not having seen the 1st. But indeed they are not the really same
With MuseScore 3.6.2 just released and the checksum on the post download page matching the actual checksum, consider this resolved.
gsha256sum MuseScore-3.6.2.548020600.dmg
9477247e14d3ac3cda1b095b9d9e70d0ed6030f6d19ab9a0013206318e75ee5d MuseScore-3.6.2.548020600.dmg