Cisco-hosted `2.4.1` library reports version `2.4.0` about openh264 HOT 10 CLOSED

OK, thanks Benzheng. I will update freedesktop-sdk and GNOME runtimes.

That said, it would be nice if you don't do this again since it breaks existing users. End user systems download the binary directly from Cisco, expecting it to match the original size and hash. We got lucky this time only because we hadn't released the updated OpenH264 to users yet, avoiding a flood of complaints. In the future, it would be better to just bump the version number and re-release.

from openh264.

OK, thanks Benzheng. I will update freedesktop-sdk and GNOME runtimes.

That said, it would be nice if you don't do this again since it breaks existing users. End user systems download the binary directly from Cisco, expecting it to match the original size and hash. We got lucky this time only because we hadn't released the updated OpenH264 to users yet, avoiding a flood of complaints. In the future, it would be better to just bump the version number and re-release.

Yes, I agree with your suggestion.

from openh264.

Is this why the 2.4.1 binaries have changed? Can you please confirm that the changes I observed in #909 (comment) are expected and not malicious?

It's causing problems; in the future, it would be better to just release 2.4.2 instead rather than respin existing releases. At the very least, please provide some notice so that we know it's not malicious.

from openh264.

FWIW it was Chinese New Year just the other day, which may explain the delay in response.

from openh264.

I can confirm that binary has been officially replaced by Cisco. Please feel free to use it. I have marked it as the latest release and there will be no new changes. @torokati44
@mcatanzaro You can see if there is still a problem of checksum and size not matching.

from openh264.

Sorry for confusion, it was actually built behind #3707 and before #3724. The official package of 2.4.1 will be temporarily set to Pre-release until the correct version information is included in the release. Thank you for discovering this issue.

from openh264.

... in the future, it would be better to just release 2.4.2 instead rather than respin existing releases. At the very least, please provide some notice so that we know it's not malicious.

Again, I agree 100%.

from openh264.

Also, could you please confirm that the current 2.4.1 binaries are the final hosted ones, and the release should no longer be marked as "pre-release", @BenzhengZhang?

from openh264.

It's causing problems;

I am downgrading freedesktop-sdk back to 2.3.1 until Cisco confirms what has happened here (additional context).

from openh264.

Closing as supposedly fixed. Thank you!

from openh264.