>Number:         22991
>Category:       pkg
>Synopsis:       ImageMagick 5.5.7.10nb1 checksum changed
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Sep 28 15:33:02 UTC 2003
>Closed-Date:
>Last-Modified:
>Originator:     Wolfgang S. Rupprecht
>Release:        NetBSD 1.6L
>Organization:
W S Rupprecht Computer Consulting, Fremont CA
>Environment:
	
	
System: NetBSD capsicum.wsrcc.com 1.6L NetBSD 1.6L (WSRCC_ATHLON) #0: Sat Aug 30 09:46:07 PDT 2003 wolfgang@capsicum.wsrcc.com:/u/src/netbsd/src-20030118/src/sys/arch/i386/compile/WSRCC_ATHLON i386
Architecture: i386
Machine: i386
>Description:

    The ImageMagik checksum fails.  Removing the tarfile and
    re-fetching didn't change the results.

    Somebody with an old version of the tarfile on hand may want to do
    a quick diff and see if the tarfile has been trojan-ed or if the
    author just updated something benign without bumping the version
    number.

>How-To-Repeat:

    make 
    ===> Checking for vulnerabilities in ImageMagick-5.5.7.10nb1
    => Checksum mismatch for ImageMagick-5.5.7-10.tar.bz2.
    Make sure the Makefile and checksum file (/usr/pkgsrc/graphics/ImageMagick/distinfo)
    are up to date.  If you want to override this check, type
    "make NO_CHECKSUM=yes [other args]".
    *** Error code 1

>Fix:

    check for trojans && update checksum
>Release-Note:
>Audit-Trail:
>Unformatted: