Skip to content

Checksum mismatch in deb package for .desktop files #134839

@timretout

Description

@timretout

Does this issue occur when all extensions are disabled?: Yes

  • VS Code Version: 1.61.0-1633631387
  • OS Version: Debian

Steps to Reproduce:

  1. install .deb package
  2. run debsums -s

(This has been previously reported as #37762 and #112311 and I cannot see any way to reopen them.)

The current postinst file calls "desktop-file-install" on the installed desktop files. This has the effect of adding the following line to each file:

X-Desktop-File-Install-Version=0.26

This gets flagged by tools which validate the security of the software supply chain, such as debsums.

In the previous issues it is implied that this tool is called in order to add the .desktop files to the menu immediately; for this there is a dedicated command update-desktop-database which will update the menu cache without modifying the installed files.

Metadata

Metadata

Assignees

Labels

insiders-releasedPatch has been released in VS Code InsidersverifiedVerification succeeded

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions