[Bug 875466] Re: Lots of packages shipping with broken md5sums

[Martin Pitt]

I checked the whole main archive now, this is the list of remaining
packages with broken md5sums:

gparted (usr/share/gnome/help/gparted/ru/figures/*.png)

/usr/share/doc/* symlinks:

dictd
ggzcore-bin
iodbc
libbsd0-dbg
libbsd-dev
libesmtp-dev
libgc-dev
libggzcore-dev
libggz-dev
libggzmod4
libgpgme11-dev
libgsl0-dbg
libice6-dbg
libice-dev
libiodbc2-dev
libiw-dev
libmeanwhile-dev
libpaper-dev
libpaper-utils
librcc-dev
librccgtk2-0
librsync-dbg
librsync-dev
libsm6-dbg
libsm-dev
libtokyocabinet-dbg
libtokyocabinet-dev
libxbase2.0-dev
libxcb-ewmh1-dev
libxcb-icccm4-dev
libxcomposite1-dbg
libxcomposite-dev
libxdamage1-dbg
libxdamage-dev
libxext6-dbg
libxext-dev
libxft2-dbg
libxft-dev
libxinerama1-dbg
libxinerama-dev
libxml++2.6-dbg
libxml++2.6-dev
libxrender1-dbg
libxrender-dev
libxt6-dbg
libxt-dev
libxxf86vm1-dbg
libxxf86vm-dev
perl
pptpd
rdiff
wireless-tools

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to dpkg in Ubuntu.
https://bugs.launchpad.net/bugs/875466

Title:
  Lots of packages shipping with broken md5sums

Status in “consolekit” package in Ubuntu:
  Fix Released
Status in “dpkg” package in Ubuntu:
  Invalid
Status in “gnome-media” package in Ubuntu:
  Fix Released
Status in “libxt” package in Ubuntu:
  In Progress
Status in “consolekit” source package in Precise:
  Fix Released
Status in “dpkg” source package in Precise:
  Invalid
Status in “gnome-media” source package in Precise:
  Fix Released
Status in “libxt” source package in Precise:
  In Progress

Bug description:
  This problem is easily noticeable on oneiric if you install the
  debsums package and run 'debsums -s'

  On a server system with only very small set of packages installed, I see broken md5sums for these packages:
  % sudo debsums -s
  debsums: changed file /usr/share/doc/libaprutil1-dbd-sqlite3/changelog.Debian.gz (from libaprutil1-dbd-sqlite3 package)
  debsums: changed file /usr/share/doc/libaprutil1-ldap/changelog.Debian.gz (from libaprutil1-ldap package)
  debsums: changed file /usr/share/doc/libxcb-render0/changelog.Debian.gz (from libxcb-render0 package)
  debsums: changed file /usr/share/doc/libxcb-shm0/changelog.Debian.gz (from libxcb-shm0 package)
  debsums: changed file /usr/share/doc/perl/changelog.Debian.gz (from perl-base package)
  debsums: changed file /usr/share/doc/racoon/changelog.Debian.gz (from racoon package)

  On a desktop system you'll see a *lot* more problems.  See here for
  example: http://ubuntuforums.org/showthread.php?t=1859706  (report
  from another person who noticed the same problem)

  
  Some of the wrong checksums are probably caused by including checksums for symlinked files from other packages into md5sums.
  Example:

  % ls -l /usr/share/doc/libxcb-shm0/changelog.Debian.gz
  lrwxrwxrwx 1 root root 30 2011-10-14 21:45 /usr/share/doc/libxcb-shm0/changelog.Debian.gz -> ../libxcb1/changelog.Debian.gz
  % aptitude download libxcb-render0
  Get: 1 http://archive.ubuntu.com/ubuntu/ oneiric/main libxcb-render0 amd64 1.7-3 [11.9 kB]
  Fetched 11.9 kB in 0s (146 kB/s)       
  % dpkg -x libxcb-render0_1.7-3_amd64.deb .
  % dpkg -e libxcb-render0_1.7-3_amd64.deb 
  % grep changelog.Debian.gz DEBIAN/md5sums 
  15276f194d3ca77e0c9682105f2f004c  usr/share/doc/libxcb-render0/changelog.Debian.gz
  % md5sum usr/share/doc/libxcb-render0/changelog.Debian.gz
  md5sum: usr/share/doc/libxcb-render0/changelog.Debian.gz: No such file or directory
  % ls -l usr/share/doc/libxcb-render0/changelog.Debian.gz
  lrwxrwxrwx 1 jk jk 30 2011-06-11 01:23 usr/share/doc/libxcb-render0/changelog.Debian.gz -> ../libxcb1/changelog.Debian.gz

  
  But there are also packages that actually have wrong md5sums for files included in the package. 
  Example:

  % aptitude download perl-base
  Get: 1 http://archive.ubuntu.com/ubuntu/ oneiric/main perl-base amd64 5.12.4-4 [1,430 kB]
  Fetched 1,430 kB in 0s (2,440 kB/s)   
  % dpkg -x perl-base_5.12.4-4_amd64.deb .
  % dpkg -e perl-base_5.12.4-4_amd64.deb
  % grep changelog.Debian.gz DEBIAN/md5sums 
  b060dab6fca4e84eceacdefb619fa79b  usr/share/doc/perl/changelog.Debian.gz
  % md5sum usr/share/doc/perl/changelog.Debian.gz
  ec4b1914bcbe7a3143e0b16f81b9a329  usr/share/doc/perl/changelog.Debian.gz

  Both of this cases should be fixed.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/consolekit/+bug/875466/+subscriptions