[Debian-in-workers] Bug#638731: debsums reports that some aspell-ml files have changed

[Francois Gouget]

Package: aspell-ml
Version: 0.04-1-4
Severity: normal


Install aspell-ml and immediately run 'debsums -s aspell-ml'. The output is:
debsums: changed file /var/lib/aspell/ml.compat (from aspell-ml package)
debsums: changed file /var/lib/aspell/ml.rws (from aspell-ml package)

This means these files were changed by aspell-ml itself, thus making it impossible to check for tampering (or file corruption), and casting doubt on the entire system for administrators who depend on the output of debsums.


-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages aspell-ml depends on:
ii  aspell                 0.60.7~20110707-1 GNU Aspell spell-checker
ii  dictionaries-common    1.11.5            Common utilities for spelling dict

aspell-ml recommends no packages.

aspell-ml suggests no packages.

-- no debconf information

-- debsums errors found:
debsums: changed file /var/lib/aspell/ml.compat (from aspell-ml package)
debsums: changed file /var/lib/aspell/ml.rws (from aspell-ml package)