[sane-devel] sane-backends 1.0.23 source code tar.gz file with incorrect MD5 hash?

[Andre Leite]

Hello to sane-devel,
  
  today I downloaded a copy of the source code related to Sane 1.0.23 (HTTP: alioth.debian.org (USA, provided by Debian))
  
  from the following links:
  https://alioth.debian.org/frs/download.php/3752/sane-backends-1.0.23.tar.gz.1
  https://alioth.debian.org/frs/download.php/3752/sane-backends-1.0.23.tar.gz.2
  https://alioth.debian.org/frs/download.php/3752/sane-backends-1.0.23.tar.gz.3
  
  The file was split in 3 parts as it was explained on the README.txt (Due to limitations in alioth's file upload software). 
  After downloading each part I executed cat to join them into the tar.gz file:
  
  (1) cat sane-backends-1.0.23.tar.gz.[1-3] > sane-backends-1.0.23.tar.gz
  
  In the end I had the complete file: sane-backends-1.0.23.tar.gz
  
  Then I downloaded the MD5 hash file: sane-backends-1.0.23.tar.gz.md5
  from the link: https://alioth.debian.org/frs/download.php/3756/sane-backends-1.0.23.tar.gz.md5
  which contains the MD5 hash
  e226a89c54173efea80e91e9a5eb6573  sane-backends-1.0.23.tar.gz
  
  Verifying the MD5 hash from the downloaded files after joining then in a single tar.gz file I get:
  (2) $ openssl md5 sane-backends-1.0.23.tar.gz
  I get
  MD5 (sane-backends-1.0.23.tar.gz) = 0023e8dda2a879dab07061938098432e
  which doesn't match the original MD5 hash indicated in the file sane-backends-1.0.23.tar.gz.md5
  
Also checking the original MD5 hash file indicated on the link:
http://www.sane-project.org/sane-md5sums.txt
It states that the original md5 hash must be:
e226a89c54173efea80e91e9a5eb6573  sane-backends-1.0.23.tar.gz

Any clues?

thanks,
Andre.