Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 373589 - stage3-amd64-20110625.tar.bz2 - incorrect checksums
Summary: stage3-amd64-20110625.tar.bz2 - incorrect checksums
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Release Media
Classification: Unclassified
Component: Stages (show other bugs)
Hardware: AMD64 Linux
: Normal critical
Assignee: Gentoo Release Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-06-30 14:27 UTC by avx
Modified: 2011-06-30 15:43 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description avx 2011-06-30 14:27:36 UTC
// hope this is in the right spot

Currently, all stage3-amd64-20110625.tar.bz2 don't validate in md5/sha1 against the corresponding .DIGESTS.

Downloaded a total of 7 times from 5 different servers, checksum always fails. Found a stage3-amd64-20110609.tar.bz2 on one of the mirrors and this is working as it should.

Don't know if some dev screwed up something or someone is tempering with the files.

Reproducible: Always

Steps to Reproduce:
1. fetch latest snapshot (25.06.2011)
2. checksum
3. fails
Actual Results:  
fails

Expected Results:  
should be ok

Don't know how to rate this, I'm going for critical to get some attention.
Comment 1 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2011-06-30 14:43:23 UTC
Jorge, please validate. Thx
Comment 2 avx 2011-06-30 15:01:26 UTC
According to @tomk in this thread:
https://forums.gentoo.org/viewtopic-p-6740068.html

someone has forgotten to update the checksums after changes have been made to the stages and there shouldn't be much to worry.

Still, doesn't leave the best impression :(
Comment 3 Jorge Manuel B. S. Vicetto (RETIRED) gentoo-dev 2011-06-30 15:13:53 UTC
I'm sorry but this is my fault.
The amd64 stages for this week are almost complete, but I'll upload a correct manifest asap.
Comment 4 avx 2011-06-30 15:33:50 UTC
Thanks, Jorge. Just been a little afraid since this never happened to me and it's obviously not my fault.

Thanks for taking care of it, I'll wait for the new digests, but consider it done.
Comment 5 Jorge Manuel B. S. Vicetto (RETIRED) gentoo-dev 2011-06-30 15:43:47 UTC
(In reply to comment #3)
> I'm sorry but this is my fault.
> The amd64 stages for this week are almost complete, but I'll upload a correct
> manifest asap.

I've fixed the CONTENTS and DIGESTS files in poseidon. Now we have to wait for it to propagate to the mirrors.
Again, I'm sorry about this.

The fixed DIGESTS files contents are:

stage3-amd64-20110625.tar.bz2.DIGESTS
# MD5 HASH
e3f83453b43d9cdb8760af72e75a07ff  stage3-amd64-20110625.tar.bz2
# SHA1 HASH
b53ecf0c94dc6410fed0fe91ee5fc87a56e85538  stage3-amd64-20110625.tar.bz2
# MD5 HASH
0ec356953265a973a8fdefc6dda764b6  stage3-amd64-20110625.tar.bz2.CONTENTS
# SHA1 HASH
8d38602e9eceb2f07bdd06bfc19d0ca3ac945a0c  stage3-amd64-20110625.tar.bz2.CONTENTS

stage3-amd64-hardened+nomultilib-20110625.tar.bz2.DIGESTS
# MD5 HASH
d6675331a150b8603ed036723364fe1b  stage3-amd64-hardened+nomultilib-20110625.tar.bz2
# SHA1 HASH
8548925c1f591e284d305646e48f83767969a08e  stage3-amd64-hardened+nomultilib-20110625.tar.bz2
# MD5 HASH
c023aad66eb94da1c194fc7795cc2ccb  stage3-amd64-hardened+nomultilib-20110625.tar.bz2.CONTENTS
# SHA1 HASH
f274a37701c1a29aa7767e3070e7a1913f99df60  stage3-amd64-hardened+nomultilib-20110625.tar.bz2.CONTENTS

stage3-amd64-hardened-20110625.tar.bz2.DIGESTS
# MD5 HASH
b6b9bf0d2fba34dcbe42ea9e487076ee  stage3-amd64-hardened-20110625.tar.bz2
# SHA1 HASH
abe3f45975295b26f000ee10a204127cf2595185  stage3-amd64-hardened-20110625.tar.bz2
# MD5 HASH
df4da58e1e0cc4293a338cf00c86917d  stage3-amd64-hardened-20110625.tar.bz2.CONTENTS
# SHA1 HASH
42e4e4a37fe71db7a17e78e44089f928f0bfa558  stage3-amd64-hardened-20110625.tar.bz2.CONTENTS