[Debian-in-workers] Bug#638729: debsums reports that some aspell-hi files have changed

[Francois Gouget]

Package: aspell-hi
Version: 0.02-4
Severity: normal


Install aspell-hi and immediately run 'debsums -s aspell-hi'. The output is:
debsums: changed file /var/lib/aspell/hi.compat (from aspell-hi package)
debsums: changed file /var/lib/aspell/hi.rws (from aspell-hi package)

This means these files were changed by aspell-hi itself, thus making it impossible to check for tampering (or file corruption), and casting doubt on the entire system for administrators who depend on the output of debsums.


-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages aspell-hi depends on:
ii  aspell                 0.60.7~20110707-1 GNU Aspell spell-checker
ii  dictionaries-common-de 1.11.5            Developer tools and Policy for spe

aspell-hi recommends no packages.

aspell-hi suggests no packages.

-- no debconf information

-- debsums errors found:
debsums: changed file /var/lib/aspell/hi.compat (from aspell-hi package)
debsums: changed file /var/lib/aspell/hi.rws (from aspell-hi package)