Arch Linux

JaimydeBree

Member

Registered: 2024-05-19

Posts: 2

checksum different for package cdist, can not install

I'm not sure why but i can not install package cdist, checksum verification failed.
Version 7.0.0, is the latest, released two years ago.
If i check here: https://launchpad.net/ubuntu/+source/cdist/7.0.0-4 it has the same checksum as in the aur: https://aur.archlinux.org/packages/cdist
Maybe the source package changed.

Trilby

Inspector Parrot

Registered: 2011-11-29

Posts: 30,330

Website

Re: checksum different for package cdist, can not install

I can confirm that 1) the checksum fails, 2) a manual checksum doesn't match what's in the PKGBUILD, and 3) neither the PKGBUILD or the upstream source (should) have changed in the past couple years.  So it seems clear that the downloaded material is in fact corrupted in some way.  And while assuming something mallicious may not (yet) be warranted, it strikes me as odd that it still decompresses to produce a seemingly fitting repo full of python and related source files (random corruption of the download would just result in a broken mess).

The checksum matches upstream ... but the PKGBUILD's source URL seems to be some other version with changes.

Last edited by Trilby (2024-08-25 17:12:14)

---

"UNIX is simple and coherent" - Dennis Ritchie; "GNU's Not Unix" - Richard Stallman