[team@security added to CC] On Fri, 2011-11-11 at 16:46 +0100, Karol Kozłowski wrote: > Archive of "squeeze-proposed-updates" provides package "xen-docs-4.0" > on the wrong checksum that does not agree with the package > "xen-docs-4.0" which is in the archive "security.debian.org".
Looking at the packages, the copy on ftp-master contains (amongst others): rw-r--r-- root/root 172714 2011-06-09 18:42 ./usr/share/doc/xen-docs-4.0/interface.pdf.gz whereas security has: -rw-r--r-- root/root 172713 2011-11-06 08:50 ./usr/share/doc/xen-docs-4.0/interface.pdf.gz The package mentioned in the amd64 .changes file matches the package on ftp-master; that .changes is dated 2011-06-09 and signed by the maintainer. The i386 .changes file has a signature from 2011-11-07, which would tie in with the second file above. The only i386 build of this version I can see in the wanna-build database is from June, so I assume it was rebuilt for some reason, including the arch-indep packages, and the packages from the rebuild somehow ended up being installed in the security archive instead of the originals. Regards, Adam -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
