Bug#762079: apt: Hash Sum mismatch while sum checks since security update

[beuc@debian.org]

Hi Michael,

On Thu, Sep 18, 2014 at 11:25:40AM +0200, Michael Vogt wrote:
> On Thu, Sep 18, 2014 at 10:26:41AM +0200, beuc@debian.org wrote:
> > Package: apt
> > Version: 0.9.7.9+deb7u3
> > Severity: important
> 
> Thanks for your bugreport.
> 
> [..] 
> > W: Failed to fetch file:/usr/src/debian-repository/local/Packages  Hash Sum mismatch
> > 
> > E: Some index files failed to download. They have been ignored, or old ones used instead.
> [..]
> > Interestingly, right after building the local packages, my autobuild
> > script issue a 'apt-get update' that completes successfully.  But when
> > I issue another 'apt-get update' even one second later I get the above
> > behavior.  Regenerating the packages produced the same behavior.
> >
> > 
> > But everything checks! What's wrong?
> 
> There is a regression in the recent security update that causes
> file:/// uris that are on a different partition (or nfs) than the apt
> lists dir to misbehave. The fix is commited as 
> http://anonscm.debian.org/cgit/apt/apt.git/commit/?h=debian/wheezy&id=3fa61cd604da1a4d744cebf3fbb747bf7c80bf91
> 
> and we will upload fixed packages shortly. If you could test the fix
> that would be much appreciated.
> 
> Sorry for the trouble,

Thanks for the fast answer.
The repository is indeed located on an NFS share.

I confirm that recompiling from the debian/wheezy branch fixes the
issue.

Cheers!
Sylvain