Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 30 Apr 2008 15:13:53 GMT
From:      Michael Scheidell <scheidell@secnap.net>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   ports/123262: png / md5/ sha checksum failure
Message-ID:  <200804301513.m3UFDr1j063873@www.freebsd.org>
Resent-Message-ID: <200804301520.m3UFK6f4044337@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         123262
>Category:       ports
>Synopsis:       png / md5/ sha checksum failure
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Apr 30 15:20:06 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Michael Scheidell
>Release:        6.3
>Organization:
SECNAP Network Security
>Environment:
uname -a
FreeBSD mx2.gazitgroup.com.spammertrap.net 6.3-RELEASE FreeBSD 6.3-RELEASE #6: Fri Feb  8 20:37:33 EST 2008     root@mia.spammertrap.net:/usr/obj/usr/src/sys/WARDEN  i386

>Description:
when attempting to update png (for security fix), 'fetch' fails.

--->  Upgrading 'png-1.2.23_1' to 'png-1.2.27' (graphics/png)
--->  Building '/usr/ports/graphics/png'
===>  Cleaning for png-1.2.27
===>  Extracting for png-1.2.27
=> MD5 Checksum mismatch for libpng-1.2.27.tar.bz2.
=> SHA256 Checksum mismatch for libpng-1.2.27.tar.bz2.
===>  Refetch for 1 more times files: libpng-1.2.27.tar.bz2 libpng-1.2.27.tar.bz2 
=> libpng-1.2.27.tar.bz2 doesn't seem to exist in /var/ports/distfiles/.
=> Attempting to fetch from http://heanet.dl.sourceforge.net/sourceforge/libpng/.
fetch: http://heanet.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: Requested Range Not Satisfiable
=> Attempting to fetch from http://nchc.dl.sourceforge.net/sourceforge/libpng/.
fetch: http://nchc.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: Requested Range Not Satisfiable
=> Attempting to fetch from http://kent.dl.sourceforge.net/sourceforge/libpng/.
fetch: http://kent.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: Requested Range Not Satisfiable
=> Attempting to fetch from http://easynews.dl.sourceforge.net/sourceforge/libpng/.
fetch: http://easynews.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: Requested Range Not Satisfiable
=> Attempting to fetch from http://ufpr.dl.sourceforge.net/sourceforge/libpng/.
fetch: http://ufpr.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: Requested Range Not Satisfiable
=> Attempting to fetch from http://umn.dl.sourceforge.net/sourceforge/libpng/.
fetch: http://umn.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: Moved Temporarily
=> Attempting to fetch from ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/.
fetch: ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/libpng-1.2.27.tar.bz2: File unavailable (e.g., file not found, no access)
=> Couldn't fetch it - please try to retrieve this
=> port manually into /var/ports/distfiles/ and try again.
*** Error code 1


erase in from distfiles, try again:

Building '/usr/ports/graphics/png'
===>  Cleaning for png-1.2.27
=> libpng-1.2.27.tar.bz2 doesn't seem to exist in /var/ports/distfiles/.
=> Attempting to fetch from http://heanet.dl.sourceforge.net/sourceforge/libpng/.
fetch: http://heanet.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: size mismatch: expected 641193, actual 804821

then it can get it from the next one.. is heanet.dl.sourceforge.net hacked?




>How-To-Repeat:
portupgrade png

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200804301513.m3UFDr1j063873>