From owner-freebsd-security@FreeBSD.ORG Fri Jan 23 21:55:58 2015 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 8DA254B4 for ; Fri, 23 Jan 2015 21:55:58 +0000 (UTC) Received: from mail.indylix.nl (mail.indylix.nl [31.220.44.23]) by mx1.freebsd.org (Postfix) with ESMTP id 4CE9A99B for ; Fri, 23 Jan 2015 21:55:58 +0000 (UTC) Message-ID: <54C2C155.6060607@indylix.nl> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=indylix.nl; s=o26EqTc7; t=1422049630; bh=E5svPo1lzU+BbdlCqR6wIUYU4UyfL+ygC7S7Slxnyls=; h=Date:From:To:Subject:References:In-Reply-To; b=rU9G9+3SWWcrlaOAZ9u2WNCg0vlBR6FK+Ax6O680Y5zlLS+OzkPB+sstTKQ1RqFvq 3PfnMWwuVGYFLYc37EwIu5MwHphm4wjJCpSQpE5V29aJyOfkdj6nzhDF1D3LSxHfsS x9iGGXXSeNa6fVeFBsvEeqz4IhmRZSTsz9MxkJCMXCuFZz2oyi7LjEcfp6sUhtGF/x Zmx1v1ny4uxEGoHSa0vr6HjgaLJgGbhEyRaB4RPlkMwjTIG90OA5qrafceLt1OfWES t7V62Pm4vQQihWxf+9xEn0yhfzLhs5TTLqI3G46iSpW5V1BfMb42uArrjFp/T//AMs ORzG3ahkuWhew== Date: Fri, 23 Jan 2015 22:47:01 +0100 From: Robert Sevat MIME-Version: 1.0 To: Garrett Wollman , freebsd-security@freebsd.org Subject: Re: Strange package checksum report References: <21698.32224.747971.146491@khavrinen.csail.mit.edu> In-Reply-To: <21698.32224.747971.146491@khavrinen.csail.mit.edu> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="SRo2eaFt1EtC92xDqnmHQxRAotFFVWXcu" X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Jan 2015 21:55:58 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --SRo2eaFt1EtC92xDqnmHQxRAotFFVWXcu Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Maybe hardware going bad? If you're using ZFS, it's probably not the hard disk since ZFS would correct it before pkg can notice it. (Unless you have no redundancy, but then you'd still see checksum errors in zpool status) Maybe bad memory that causes corruption? Kind Regards, Robert Sevat On 01/23/2015 05:59 PM, Garrett Wollman wrote: > On some of my machines, I've been noticing the following in the > nightly security mail: >=20 > Checking for packages with mismatched checksums: > p5-XML-SAX-0.99_2: /usr/local/lib/perl5/site_perl/XML/SAX/ParserDetails= =2Eini > python27-2.7.9: /usr/local/lib/python2.7/UserDict.pyc > python27-2.7.9: /usr/local/lib/python2.7/_weakrefset.pyc > python27-2.7.9: /usr/local/lib/python2.7/abc.pyc > python27-2.7.9: /usr/local/lib/python2.7/codecs.pyc > python27-2.7.9: /usr/local/lib/python2.7/copy_reg.pyc > python27-2.7.9: /usr/local/lib/python2.7/encodings/__init__.pyc > [ a bunch of other .pyc files elided ] >=20 > Does anyone know what causes this? Force-reinstalling the package > fixes it, but only temporarily -- by the time the next security mail > comes, it's back in this state. >=20 > -GAWollman --SRo2eaFt1EtC92xDqnmHQxRAotFFVWXcu Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJUwsFdAAoJEOBNTiYXv1P0z3gP/RT1INT/dxk0oNyaiuZ0CJJr FFibGvdFwY7FfNTexn2yo++lkH3mxaRs4no04Ix/cxOskKISShVYitTulaL2woWu dce1y6oK6C0tey4eKrnQCfHMtsjhPP6AkouZmM1VmpY4qhY5Hk5FrqFitvo0SIxP fKwkPJFKBXTORuz7yE6OqMSodTruAoc4IwdYtsE4VrciE0FNPwfsi1Q1+2AtAxjt zLYdawgmUl2AME3Jvi46DkwMEV/JX1XN1uHh5uZu4FAgS6NC5AfOZyUegxlDb6OS buPAxL8NGbvoXClh+MdE24sRQWFpsVBxS6raWdbRsBnRrBqqmxWV7YnP+5/gfjU7 mkLN040v9bjG4tG5OYu0G+OdRVkCkmWgxBWDki9cTZAUUnGGtC1QXMpNQpEKJ/wS LwZRaOUuZYY14CVVj9TEqkZGv4clE2nUqSF3ejy74cfney5TRCytA9/1SF61c0s6 MFIfvO1WWTnF+AtDG0FiHIwFJfaivimVB2G22mPU/16n7P248Augv2bQ0sh0SDg9 J196MEfXHZY5TJnOyCtLx+VWBbHZfH019x/8MV4UlWDAwyvqAYJ764p1Vf8BlZDX bKA5JSmMaocoPy81TLJBvni94wGPWiRPse2jVCeZO49CEy493nj+90Lyb1XKNOMG Afvljg4T/g70PuSnGxDo =IjXq -----END PGP SIGNATURE----- --SRo2eaFt1EtC92xDqnmHQxRAotFFVWXcu--