Bug 21616

Summary:	MD5 check failed downloading libnasl-1.2.7.tar.gz from gentoo.oregonstate.edu
Product:	Gentoo Linux	Reporter:	David Ripton <dripton>
Component:	Current packages	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED DUPLICATE
Severity:	critical
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description David Ripton 2003-05-24 11:14:07 UTC

Did "emerge nessus", which depends on libnasl. 
emerge downloaded from
http://gentoo.oregonstate.edu/distfiles/libnasl-1.2.7.tar.gz.  

Got 
!!! File is corrupt or incomplete. (Digests do not match)
>>> our recorded digest: 7cbe6ba0a2243e4cdddee186da499153
>>>  your file's digest: 6b2ca043ea7db0fe17bf01d66847e087

I googled for the file and found a libnasl-1.2.7.tar.gz that *does* match the
ebuild's expected MD5 sum on another site, so I'm pretty confident that the MD5
sum is right and the file on the Gentoo mirror is bad.

I manually downloaded the file from the Gentoo mirror and tried to untar it, but
got an unexpected end of file from gunzip, even though the file size matches. 
Because it won't untar, I suspect an innocent bad upload rather than an attempt
to insert a trojan.

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

Comment 1 Jon Portnoy (RETIRED) gentoo-dev

2003-05-24 13:11:06 UTC


*** This bug has been marked as a duplicate of 21584 ***