On Fri, 05 Dec 2003 11:38:27 +0600
"Anuradha Ratnaweera" <ARatnaweera@...>  Add to Address Book wrote:

> Hi all,
> 
> I tried to emerge gaim, and there was a MD5 mismatch for XFree86
> patches.  Wondering if it has got to do with the compromise.

while its possible, i dont know if the server also hosted things regarding distributing files, AFAIK no rsync server does file hosting also


> I am CCing to user list, in case if somebody else also have encountered this.
> 

one thing you can try is removing the file from /usr/portage/distfiles and have it download again, see if you get the same bad digest.

> Here is the transcript:
> 
> # emerge --update gaim
> Calculating dependencies  ...done!
> >>> emerge (1 of 7) x11-base/xfree-4.3.0-r3 to /
> >>> md5 src_uri ;-) X430src-1.tgz
> >>> md5 src_uri ;-) X430src-2.tgz
> >>> md5 src_uri ;-) X430src-3.tgz
> >>> md5 src_uri ;-) X430src-4.tgz
> >>> md5 src_uri ;-) X430src-5.tgz
> 
> !!! File is corrupt or incomplete. (Digests do not match)
> >>> our recorded digest: b8b76ae58ef3b727a127eec470f29b6b
> >>>  your file's digest: f74201ed582367929232843b972c637d
> !!! File does not exist:
> /usr/portage/distfiles//XFree86-4.3.0-patches-2.1.23.tar.bz2
> 
> 	Anuradha
> 
> -- 
> 
> http://www.linux.lk/~anuradha/
> 
> 
> 
> --
> gentoo-security@g.o mailing list
> 


-----BEGIN GEEK CODE BLOCK----
Version: 3.1
GCS/CM/E/M/S/O d--(-) s:+>:-
a--->-->->>+>++>+++$ C+++>++++$ UL++++>++++$
P+++>++++$ L++++>++++$ !E-? W++>++$>+++$
N++>* !o? !K? w--->---$ O-- M-@ !V--? PS+++(++(+((-))))
PE Y+(++)@ PGP+++(++) t+++>+++$ 5--(-)@ X++@>+++@
R+(++)@ tv+++@>++@ b+>++ DI++++ D+++@ G+++>++++ 
e>+$>++$>+++$>++++$>+++++$ h+>++ r*(--(++))@ !y+>-->->+++@
-----END GEEK CODE BLOCK-----