Your package contains sources which have different checksums from upstream versions. Please verify they are correct and differences do not pose a problem for Fedora. MD5-sum check ------------- http://repository.codehaus.org/org/codehaus/woodstox/stax2-api/3.1.1/stax2-api-3.1.1-sources.jar : CHECKSUM(SHA256) this package : d1bffec8cfc69d79a2efc9c7c11b8cc0ed977d70eaf156b5a1c980330afeb9b0 CHECKSUM(SHA256) upstream package : f967629274d9ac6b5d6fa9ace9b7666168774bc72e8ac201515355755a2179ab http://repository.codehaus.org/org/codehaus/woodstox/stax2-api/3.1.1/stax2-api-3.1.1.pom : CHECKSUM(SHA256) this package : e5b887dcf0995a484acc4d2b6c35fd48afe5b00cf93484fb3072e41815e1ba78 CHECKSUM(SHA256) upstream package : e5b887dcf0995a484acc4d2b6c35fd48afe5b00cf93484fb3072e41815e1ba78 diff -r also reports differences
Created attachment 690489 [details] upstream changes - diff Upstream guys apparently do not bother with changing the version when doing changes :] Look at the attached diff ...