Bug#376817: confirmation
On Tue, Aug 08, 2006 at 12:51:42AM +1200, Mark Robinson wrote:
> I have several times seen it flag MD5SUM errors where the expected MD5SUM
> and that computed are identical.
I would be interested to see verbatim copies of such errors.
> Surely these errors should *never* be seen and must raise questions about
> the security of the entire distribution.
Not exactly; the situation is such that apt needs a consistent view of the
archive in order to authenticate it (several different files must match),
and intermediate caches don't always provide this consistency.
--
- mdz
Reply to: