libxml2.tcz.md5.txt FAILED

[chattrhand]

Hello TinyCore Team,

it seems to be a small problem, but it could be something for security fans:
- Installed a tinycore USBStick from a CorePlus-9.0 CD, burning date 2018-03-03 No problem.
- I did all of the updates since using the AppBrowser, but not always checked the md5sum.
- Last month I accidentally found  libxml2.tcz.md5.txt FAILED . Only this one.
I tried to use different repositories, but no difference,

No suspicious behaviour of the system, all seems ok. No panic, but could this be a backdoor?

greetings chattrhand

[curaga]

Server-side it matches the extension. Could be usb-stick corruption, or something else. This is the sum I see (9.x x86):
090cca0c005c682349ca1cc19cc15d66  libxml2.tcz

[Rich]

Hi chattrhand
I just checked both x86 and x86_64 repos and both appear to be correct..

x86:

Code: [Select]

tc@box:~/x$ wget http://tinycorelinux.net/9.x/x86/tcz/libxml2.tcz
--2018-08-07 13:01:21--  http://tinycorelinux.net/9.x/x86/tcz/libxml2.tcz
Resolving tinycorelinux.net... 89.22.99.37
Connecting to tinycorelinux.net|89.22.99.37|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 679936 (664K) [text/plain]
Saving to: `libxml2.tcz'

100%[============================================================================================================>] 679,936     1002K/s   in 0.7s   

2018-08-07 13:01:22 (1002 KB/s) - `libxml2.tcz' saved [679936/679936]

tc@box:~/x$ wget http://tinycorelinux.net/9.x/x86/tcz/libxml2.tcz.md5.txt
--2018-08-07 13:01:44--  http://tinycorelinux.net/9.x/x86/tcz/libxml2.tcz.md5.txt
Resolving tinycorelinux.net... 89.22.99.37
Connecting to tinycorelinux.net|89.22.99.37|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 46 [text/plain]
Saving to: `libxml2.tcz.md5.txt'

100%[============================================================================================================>] 46          --.-K/s   in 0s     

2018-08-07 13:01:44 (1.54 MB/s) - `libxml2.tcz.md5.txt' saved [46/46]

tc@box:~/x$ md5sum -c libxml2.tcz.md5.txt
libxml2.tcz: OK
tc@box:~/x$ ls -l
total 676
-rw-r--r-- 1 tc staff 679936 Jan  4  2018 libxml2.tcz
-rw-r--r-- 1 tc staff     46 Jan  4  2018 libxml2.tcz.md5.txt
tc@box:~/x$
and x86_64:

Code: [Select]

tc@box:~/x$ wget http://tinycorelinux.net/9.x/x86_64/tcz/libxml2.tcz
--2018-08-07 13:03:01--  http://tinycorelinux.net/9.x/x86_64/tcz/libxml2.tcz
Resolving tinycorelinux.net... 89.22.99.37
Connecting to tinycorelinux.net|89.22.99.37|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 610304 (596K) [text/plain]
Saving to: `libxml2.tcz'

100%[============================================================================================================>] 610,304      982K/s   in 0.6s   

2018-08-07 13:03:02 (982 KB/s) - `libxml2.tcz' saved [610304/610304]

tc@box:~/x$ wget http://tinycorelinux.net/9.x/x86_64/tcz/libxml2.tcz.md5.txt
--2018-08-07 13:03:12--  http://tinycorelinux.net/9.x/x86_64/tcz/libxml2.tcz.md5.txt
Resolving tinycorelinux.net... 89.22.99.37
Connecting to tinycorelinux.net|89.22.99.37|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 46 [text/plain]
Saving to: `libxml2.tcz.md5.txt'

100%[============================================================================================================>] 46          --.-K/s   in 0s     

2018-08-07 13:03:12 (2.04 MB/s) - `libxml2.tcz.md5.txt' saved [46/46]

tc@box:~/x$ md5sum -c libxml2.tcz.md5.txt
libxml2.tcz: OK
tc@box:~/x$ ls -l
total 608
-rw-r--r-- 1 tc staff 610304 Feb 11 13:33 libxml2.tcz
-rw-r--r-- 1 tc staff     46 Feb 11 13:33 libxml2.tcz.md5.txt
tc@box:~/x$
Maybe try removing and reinstalling  libxml2.tcz.

[chattrhand]

Hi Rick,

Success! Uninstalling  libxml2  was not allowed because of dependencies.

Uninstalling firefox also removed libxml.tcz, so I had to use the palemoon browser instead.

Now I tried again to re-install firefox via  firefox_getLatest.tcz and voila!  libxml2.tcz  seems to be ok.
(tried some restarts and tested it a bit wildly)

Btw. NoScript reactivated itself with no interaction. That's fine.

Thanks for your help!

[polikuo]

Uninstalling  libxml2  was not allowed because of dependencies.

I'd do

Code: [Select]

rm -f /etc/sysconfig/tcedir/optional/libxml2.tcz*
tce-load -w libxml2

If there are other extensions missing

Code: [Select]

tce-audit fetchmissing