Package: libgcc1 Version: 1:8.3.0-6 Severity: normal Dear Maintainer,
It seems that the MD5 info provided with this package in the Debian binary package is incorrect I'm useing a "poor man's ids" to find modified package files on my systems: cat /root/bin/find_debian_md5_mismatch #!/bin/sh # apt install dlocate dpkg --get-selections|grep install|awk '{print $1}'|xargs -iFOO dlocate -md5check 'FOO' 2>&1|fgrep ': FAILED'|fgrep -v ': FAILED open or read' |sort|uniq | sed -e 's/^/\//' # /fin After checking (including freshly installed systems by VPS providers) I found that a number of packages consistently have incorrect md5 checksums, of which libgcc1 is one. Manual checks of these files did not show any nefarieus stuff, and these checksum faillures have been here for a long time (years .. I'm only reporting it now because I'm finally at the end of my todo lists). The file in question is : lib/x86_64-linux-gnu/libgcc_s.so.1 It can easely be reproduced with: sudo apt install dlocate sudo dlocate -md5check libgcc1:amd64 | grep FAILED If there is anything I can do to help, please let me know Kind regards, =paulv Paul Vogel pa...@bikkel.org +31 6 245 133 79 -- System Information: Debian Release: 11.1 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-14-amd64 (SMP w/1 CPU thread) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8), LANGUAGE not set Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages libgcc1 depends on: ii gcc-8-base 8.3.0-6 ii libc6 2.31-13+deb11u2 libgcc1 recommends no packages. libgcc1 suggests no packages. -- no debconf information