[Bug 822272] [NEW] Qualitynet mirror serving bad packages

[Launchpad Bug Tracker]

You have been subscribed to a public bug:

I have attempted to use Qualitynet
(https://launchpad.net/ubuntu/+mirror/ubuntu.qualitynet.net-archive) a
few times over the past week to update Lucid and Natty installations.
However, I am often getting a "Hash Sum mismatch". The reason is that
the Qualitynet archive is serving packages with wrong bits. I am fairly
certain it is not a proxy issue; I have attempted to fetch the package
through multiple protocols (http, rsync, ftp), and from multiple
locations where proxies are not involved. I have verified this across
multiple computers with different NICs.

Here's an example of a mismatch, verified via MD5 checksums:
lid at ec:~/tmp$ curl -O "http://archive.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.5.8~dfsg-1ubuntu2.3_i386.deb"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 13.0M  100 13.0M    0     0  3650k      0  0:00:03  0:00:03 --:--:-- 3770k
lid at ec:~/tmp$ openssl md5 smbclient_3.5.8~dfsg-1ubuntu2.3_i386.deb
MD5(smbclient_3.5.8~dfsg-1ubuntu2.3_i386.deb)= d241d2abea1311393d7dd5419b2ba057

lid at ec:~/tmp$ curl -O "http://ubuntu.qualitynet.net/ubuntu/pool/main/s/samba/smbclient_3.5.8~dfsg-1ubuntu2.3_i386.deb"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 13.0M  100 13.0M    0     0  2601k      0  0:00:05  0:00:05 --:--:-- 3255k
lid at ec:~/tmp$ openssl md5 smbclient_3.5.8~dfsg-1ubuntu2.3_i386.deb
MD5(smbclient_3.5.8~dfsg-1ubuntu2.3_i386.deb)= 54db4994c9213248b34602442fba218f

** Affects: python-apt (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Qualitynet mirror serving bad packages
https://bugs.launchpad.net/bugs/822272
You received this bug notification because you are a member of Ubuntu Foundations Bugs, which is subscribed to python-apt in Ubuntu.