MD5 checksum failed on some files. Validation required.

lfd on my server sent me an e-mail about several files that were modified. Can someone from the cPanel/WHM team tell me whether or not they are from a legitimate update? There used to be a .version-md5-cache URL that I could use to cross reference but I can't find that anymore. fd2607ef6d3192436309230997503d56 /usr/local/bin/crontab 16dae647b82b52c99ed34d4b271ee3b5 /usr/local/bin/passwd b97e67ed2358f6976c9c87da1d022366 /usr/bin/cpapi1 b97e67ed2358f6976c9c87da1d022366 /usr/bin/cpapi2 b97e67ed2358f6976c9c87da1d022366 /usr/bin/cpapi3 b97e67ed2358f6976c9c87da1d022366 /usr/bin/uapi b97e67ed2358f6976c9c87da1d022366 /usr/sbin/whmapi0 b97e67ed2358f6976c9c87da1d022366 /usr/sbin/whmapi1 b97e67ed2358f6976c9c87da1d022366 /bin/cpapi1 b97e67ed2358f6976c9c87da1d022366 /bin/cpapi2 b97e67ed2358f6976c9c87da1d022366 /bin/cpapi3 b97e67ed2358f6976c9c87da1d022366 /bin/uapi b97e67ed2358f6976c9c87da1d022366 /sbin/whmapi0 b97e67ed2358f6976c9c87da1d022366 /sbin/whmapi1 The stat for /usr/local/bin/crontab: File: "/usr/local/bin/crontab" -> "/usr/local/cpanel/bin/jail_safe_crontab" Size: 39 Blocks: 0 IO Block: 4096 symbolic link Device: fd00h/64768d Inode: 45617578 Links: 1 Access: (0777/lrwxrwxrwx) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2023-05-03 20:01:02.235635607 +1000 Modify: 2021-02-19 10:30:05.301917037 +1100 Change: 2021-02-19 10:30:05.301917037 +1100 Birth: - The stat for /usr/local/bin/passwd: File: "/usr/local/bin/passwd" -> "/usr/local/cpanel/bin/jail_safe_passwd" Size: 38 Blocks: 0 IO Block: 4096 symbolic link Device: fd00h/64768d Inode: 45617579 Links: 1 Access: (0777/lrwxrwxrwx) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2023-05-03 23:01:10.229030447 +1000 Modify: 2021-02-19 10:30:05.301917037 +1100 Change: 2021-02-19 10:30:05.301917037 +1100 Birth: - All of the b97e67ed2358f6976c9c87da1d022366 MD5 files are links to /usr/local/cpanel/bin/apitool. For example, /usr/bin/cpapi1: File: "/usr/bin/cpapi1" -> "../../usr/local/cpanel/bin/cpapi1" Size: 33 Blocks: 0 IO Block: 4096 symbolic link Device: fd00h/64768d Inode: 45617580 Links: 1 Access: (0777/lrwxrwxrwx) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2023-05-03 19:01:00.708813662 +1000 Modify: 2021-02-19 10:30:05.303916965 +1100 Change: 2021-02-19 10:30:05.303916965 +1100 Birth: - which links to: File: "/usr/local/cpanel/bin/cpapi1" -> "apitool" Size: 7 Blocks: 0 IO Block: 4096 symbolic link Device: fd00h/64768d Inode: 46795430 Links: 1 Access: (0777/lrwxrwxrwx) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2023-05-03 19:01:00.708813662 +1000 Modify: 2021-02-16 01:55:14.000000000 +1100 Change: 2021-02-19 10:24:57.051817929 +1100 Birth: - which finally links to: File: "/usr/local/cpanel/bin/apitool" Size: 3166528 Blocks: 6192 IO Block: 4096 regular file Device: fd00h/64768d Inode: 46798458 Links: 1 Access: (0755/-rwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2023-05-03 23:01:08.124103561 +1000 Modify: 2023-05-02 22:47:08.041825023 +1000 Change: 2023-05-02 22:47:09.883761098 +1000 Birth: - My cPanel/WHM version is: /usr/local/cpanel/cpanel -V 110.0 (build 5) cat /usr/local/cpanel/version 11.110.0.5 Thanks!

gareth.star

May 03, 2023 23:43

I managed to verify these files myself. For anyone coming across this thread via a seach engine, I did the following: - For each file, I downloaded it manually from the cPanel server using the URL:

cPRex Jurassic Moderator

May 04, 2023 15:14

I'm glad you found the answer. Usually when this happens it's because there is an update and LFD either doesn't have the new information or didn't catch everything in the update.

MD5 checksum failed on some files. Validation required.

Comments

Didn't find what you were looking for?