Bug#319142: apt: attempts to install corrupted packages

[Goswin von Brederlow <brederlo@informatik.uni-tuebingen.de>]

Matt Zimmerman <mdz@debian.org> writes:

> severity 319142 wishlist
> merge 319142 250305
> thanks
>
> On Wed, Jul 20, 2005 at 07:44:02AM +0100, Andrew Suffield wrote:
>> asuffield@cyclone:~$ md5sum /var/cache/apt/archives/xfonts-scalable_6.8.2.dfsg.1-3_all.deb
>> a525d80fb0df950f4e9b0e3141c63d0c  /var/cache/apt/archives/xfonts-scalable_6.8.2.dfsg.1-3_all.deb
>> 
>> Not only is this broken and annoying, it indicates that the security
>> checking code is completely non-functional.
>
> apt only verifies the md5sum on download; it implicitly trusts the local
> cache.
>
> "apt-get clean" should resolve the issue.

Which is not true as you can see in my follow up.

MfG
        Goswin