Arch Linux

Please read this before reporting a bug:

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

FS#77969 - [coreutils] checksums --check reports "OK" for wrong checksum

Attached to Project: Arch Linux
Opened by Christian Heusel (gromit) - Thursday, 23 March 2023, 13:34 GMT
Last edited by Sébastien Luttringer (seblu) - Saturday, 25 March 2023, 12:19 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Sébastien Luttringer (seblu)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No



There is a bug in the latest coreutils package that reports where checksuming files reports "OK" even if the checksum does not match. The bug only occurs if the checksum is the first of n.
I opened this bugreport to give visibility to this bug on official arch resources and to inform the [coreutils] maintainer of it so they can decide whether to backport the patch that fixes the bug (patch is linked in the bugreport).

This bug was reported first by user u/patenteng on reddit:
moviuro reposted it to the coreutils bugtracker:

Additional info:
* package version(s): 9.2-1
* link to upstream bug report, if any:

Steps to reproduce:
echo "123" > 1
echo "1234" > 2
echo "abc" > 3
sha256sum 1 2 3 > sums.sha256
# alter the second file
echo "123" > 2
sha256sum -c sums.sha256
tail -n 2 sums.sha256 | sha256sum -c


1: OK
2: OK
3: OK
sha256sum: WARNING: 1 computed checksum did NOT match
3: OK
sha256sum: WARNING: 1 computed checksum did NOT match
This task depends upon

Closed by  Sébastien Luttringer (seblu)
Saturday, 25 March 2023, 12:19 GMT
Reason for closing:  Fixed
Additional comments about closing:  coreutils-9.2-2
Comment by nl6720 (nl6720) - Thursday, 23 March 2023, 13:46 GMT