Package: libgcc1
Version: 1:8.3.0-6
Severity: normal

Dear Maintainer,

It seems that the MD5 info provided with this package in the Debian binary 
package is incorrect 

I'm useing a "poor man's ids" to find modified package files on my systems:

cat /root/bin/find_debian_md5_mismatch 
#!/bin/sh
# apt install dlocate 
dpkg --get-selections|grep install|awk '{print $1}'|xargs -iFOO dlocate 
-md5check 'FOO' 2>&1|fgrep ': FAILED'|fgrep -v ': FAILED open or read' 
|sort|uniq | sed -e 's/^/\//' 
# /fin 

After checking (including freshly installed systems by VPS providers) I found 
that a number of 
packages consistently have incorrect md5 checksums, of which libgcc1 is one. 
Manual checks of these
files did not show any nefarieus stuff, and these checksum faillures have been 
here for a long time
(years .. I'm only reporting it now because I'm finally at the end of my todo 
lists).

The file in question is :
lib/x86_64-linux-gnu/libgcc_s.so.1

It can easely be reproduced with:

sudo apt install dlocate
sudo dlocate -md5check libgcc1:amd64 | grep FAILED

If there is anything I can do to help, please let me know

Kind regards,

=paulv

Paul Vogel
pa...@bikkel.org
+31 6 245 133 79 


-- System Information:
Debian Release: 11.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-14-amd64 (SMP w/1 CPU thread)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libgcc1 depends on:
ii  gcc-8-base  8.3.0-6
ii  libc6       2.31-13+deb11u2

libgcc1 recommends no packages.

libgcc1 suggests no packages.

-- no debconf information

Reply via email to