/var/lib/dpkg/info/$package.md5sums

1 msg	Re: [SECURITY] [DSA 1372-1] New ktorrent packag...
1 msg	Re: [SECURITY] [DSA 1370-2] New phpmyadmin pack...
1 msg	Ihanot received any response in regards the fun...
2 msg	Re: [SECURITY] [DSA 1370-1] New phpmyadmin pack...
1 msg	Maciej Rzepkowski : nie ma mnie w pracy.
1 msg	Selinux targeted policy postfix remove fail in ...
3 msg	fail2ban vs. syslogd compression (to be solved ...
4 msg	debsecan vs. debian-volatile
2 msg	missing security updates for powerpc
3 msg	Re: [DSA 1360-1] New rsync packages fix arbitra...
10 msg	fail2ban vs. syslogd compression
1 msg	Yahoo: reply to mail goes to group instead
1 msg	SElinux troubles
1 msg	Testers needed for Asterisk/Sarge
5 msg	CISP Compliance
1 msg	Re: [SECURITY] [DSA 1357-1] New koffice package...

/var/lib/dpkg/info/$package.md5sums
\ Maximilian Wilhelm (19 Aug 2007)

4 msg	OPIE and S/Key authentication
7 msg	security.debian.org: MD5Sum mismatch
9 msg	Re: [DSA 1356-1] New Linux 2.6.18 packages fix ...

Subject:	/var/lib/dpkg/info/$package.md5sums
Group:	Debian-security
From:	Maximilian Wilhelm
Date:	19 Aug 2007

Hi!

While tracking down an incident in our network, I used 'debsums' to
check what files have been modified on our still Sarge boxes and on
our Etch boxes, too.

I noticed that for some essential packages there are no md5sums
information in /var/lib/dpkg/info/:

debsums: no md5sums for bzip2
debsums: no md5sums for console-data
debsums: no md5sums for debian-archive-keyring
debsums: no md5sums for gnupg
debsums: no md5sums for gpgv
debsums: no md5sums for initscripts
debsums: no md5sums for iproute
debsums: no md5sums for klogd
debsums: no md5sums for libbz2-1.0
debsums: no md5sums for module-init-tools
debsums: no md5sums for modutils
debsums: no md5sums for mount
debsums: no md5sums for netbase
debsums: no md5sums for openbsd-inetd
debsums: no md5sums for sysv-rc
debsums: no md5sums for sysvinit
debsums: no md5sums for sysvinit-utils
debsums: no md5sums for udev
debsums: no md5sums for util-linux

Simple question: Why are there no md5sums available?
Shouldn't they exist in any package?
If not, why not?

Ciao
Max
--
Follow the white penguin.

--
To UNSUBSCRIBE, email to debian-security-REQUEST
with a subject of "unsubscribe". Trouble? Contact listmaster