>Number:         22842
>Category:       pkg
>Synopsis:       distinfo checksum update needed for net/tsclient
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Sep 18 09:09:00 UTC 2003
>Closed-Date:
>Last-Modified:
>Originator:     Robert Elz
>Release:        NetBSD 1.6T   (-- pkgsrc current as of 2003-09-18 - ie: now)
>Organization:
	Prince of Songkla University
>Environment:
System: NetBSD delta.cs.mu.OZ.AU 1.6T NetBSD 1.6T (DELTA) #42: Thu May 29 12:23:16 ICT 2003 kre@fuchsia.cs.mu.OZ.AU:/usr/obj/sys/DELTA i386
Architecture: i386
Machine: i386
>Description:
	Since tsclient was updated (a couple of days ago) to 0.124 I have
	been unable to fetch a distfile that matches the checksum expected
	by pkgsrc.   In that period I have fetched two different versions
	of something known as tsclient-0.124.tar.gz (both of which seem to
	be well formed gzip'd tar archives - ie: neither was corrupted during
	the transfer).   The difference between the two versions I have seems
	to relate to the Chinese messages file (tsclient-0.124/po/zh_CN.po).
	Since I don't have the distfile expected by pkgsrc, I don't know
	what other differences might exist (also: I did not perform any
	kind of genuine analysis of the two files I have, just looked at
	the tar 't' output and compared those - no promises that there isn't
	also a well hidden trojan...)
>How-To-Repeat:
	rm ..../distfiles/tsclient-0.124.tar.gz
	cd ..../pkgsrc/net/tsclient
	make checksum
>Fix:
	Verify that the (seemingly constantly changing) distfile is still
	safe, and update the distinfo

		make distinfo

	(after the above) and commit.
>Release-Note:
>Audit-Trail:
>Unformatted: