[Debian-in-workers] Bug#638732: debsums reports that some aspell-or files have changed

[Francois Gouget]

Package: aspell-or
Version: 0.03-1-3
Severity: normal


Install aspell-or and immediately run 'debsums -s aspell-or'. The output is:
debsums: changed file /var/lib/aspell/or.compat (from aspell-or package)
debsums: changed file /var/lib/aspell/or.rws (from aspell-or package)

This means these files were changed by aspell-or itself, thus making it impossible to check for tampering (or file corruption), and casting doubt on the entire system for administrators who depend on the output of debsums.


-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages aspell-or depends on:
ii  aspell                 0.60.7~20110707-1 GNU Aspell spell-checker
ii  dictionaries-common    1.11.5            Common utilities for spelling dict

aspell-or recommends no packages.

aspell-or suggests no packages.

-- no debconf information

-- debsums errors found:
debsums: changed file /var/lib/aspell/or.compat (from aspell-or package)
debsums: changed file /var/lib/aspell/or.rws (from aspell-or package)