ports/123262: png / md5/ sha checksum failure

[Michael Scheidell]

>Number:         123262
>Category:       ports
>Synopsis:       png / md5/ sha checksum failure
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Apr 30 15:20:06 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Michael Scheidell
>Release:        6.3
>Organization:
SECNAP Network Security
>Environment:
uname -a
FreeBSD mx2.gazitgroup.com.spammertrap.net 6.3-RELEASE FreeBSD 6.3-RELEASE #6: Fri Feb  8 20:37:33 EST 2008     root at mia.spammertrap.net:/usr/obj/usr/src/sys/WARDEN  i386

>Description:
when attempting to update png (for security fix), 'fetch' fails.

--->  Upgrading 'png-1.2.23_1' to 'png-1.2.27' (graphics/png)
--->  Building '/usr/ports/graphics/png'
===>  Cleaning for png-1.2.27
===>  Extracting for png-1.2.27
=> MD5 Checksum mismatch for libpng-1.2.27.tar.bz2.
=> SHA256 Checksum mismatch for libpng-1.2.27.tar.bz2.
===>  Refetch for 1 more times files: libpng-1.2.27.tar.bz2 libpng-1.2.27.tar.bz2 
=> libpng-1.2.27.tar.bz2 doesn't seem to exist in /var/ports/distfiles/.
=> Attempting to fetch from http://heanet.dl.sourceforge.net/sourceforge/libpng/.
fetch: http://heanet.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: Requested Range Not Satisfiable
=> Attempting to fetch from http://nchc.dl.sourceforge.net/sourceforge/libpng/.
fetch: http://nchc.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: Requested Range Not Satisfiable
=> Attempting to fetch from http://kent.dl.sourceforge.net/sourceforge/libpng/.
fetch: http://kent.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: Requested Range Not Satisfiable
=> Attempting to fetch from http://easynews.dl.sourceforge.net/sourceforge/libpng/.
fetch: http://easynews.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: Requested Range Not Satisfiable
=> Attempting to fetch from http://ufpr.dl.sourceforge.net/sourceforge/libpng/.
fetch: http://ufpr.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: Requested Range Not Satisfiable
=> Attempting to fetch from http://umn.dl.sourceforge.net/sourceforge/libpng/.
fetch: http://umn.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: Moved Temporarily
=> Attempting to fetch from ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/.
fetch: ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/libpng-1.2.27.tar.bz2: File unavailable (e.g., file not found, no access)
=> Couldn't fetch it - please try to retrieve this
=> port manually into /var/ports/distfiles/ and try again.
*** Error code 1


erase in from distfiles, try again:

Building '/usr/ports/graphics/png'
===>  Cleaning for png-1.2.27
=> libpng-1.2.27.tar.bz2 doesn't seem to exist in /var/ports/distfiles/.
=> Attempting to fetch from http://heanet.dl.sourceforge.net/sourceforge/libpng/.
fetch: http://heanet.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: size mismatch: expected 641193, actual 804821

then it can get it from the next one.. is heanet.dl.sourceforge.net hacked?




>How-To-Repeat:
portupgrade png

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: