There has been a mistake in the upload of libupnp-1.6.8.tar.bz2. The file has already been replaced and a copy with the name libupnp-1.6.8-1.tar.bz2 has been added, as well as files libupnp-1.6.8.tar.bz2.sha1 and libupnp-1.6.8-1.tar.bz2.sha1, so that you can check that you are actually downloading the right file. The copy with a different name has been added because mirrors take some time to update.
We apologize for the inconvenience.