does not handle updated file images with changed md5sums
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Transmission |
Fix Released
|
Unknown
|
|||
transmission (Ubuntu) |
Fix Released
|
Medium
|
Unassigned |
Bug Description
Binary package hint: transmission
Last night I started downloads of desktop-i386 and desktop-amd64 isos from http://
This morning when I verified the md5sums they were both wrong. Unfortunately Transmission has also been serving these bad images out, so I suspect others have bad iso images also. Besides using ubuntu-bug to attach system info I have also attached the amd64.iso.torrent file I got from the cdimage site.
So far I have downloaded the i386 iso directly from the site and the md5sums verify on that image.
BAD MD5SUMS FROM Transmission DOWNLOAD
0a31556ec555f51
3c9a7bec30a0078
Please let me know if I can supply any additional relevant information.
Aside from a bug or limitation of Transmission that allows it to download and then share out a bad ISO image, it seems for new users of P2P like me the default should be more secure (e.g. download is not shared with others until user approves (and is warned to do an md5sum to prevent polluting the world).
ProblemType: Bug
Architecture: amd64
Dependencies:
DistroRelease: Ubuntu 8.10
Package: transmission None [modified: /var/lib/
PackageArchitec
ProcEnviron:
PATH=/
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: transmission
Uname: Linux 2.6.27-11-generic x86_64
Changed in transmission: | |
status: | Unknown → Fix Released |
Changed in transmission (Ubuntu): | |
status: | Incomplete → Fix Committed |
Doesn't look like ubuntu-bug attached any OS or package info. Here is the minimum. Let me know what more you need.
Description: Ubuntu 8.10
Release: 8.10
transmission: 34-0ubuntu2. 2 0 us.archive. ubuntu. com intrepid- updates/ universe Packages us.archive. ubuntu. com intrepid/universe Packages
Installed: (none)
Candidate: 1.34-0ubuntu2.2
Version table:
1.
500 http://
1.34-0ubuntu2 0
500 http://
I've also attached the i386 torrent file while I'm at it...