#774063 pciutils: update-pciids changes md5sum of pci.ids

Package:
pciutils
Source:
pciutils
Description:
PCI utilities
Submitter:
Sebastian Schmidt
Date:
2026-04-25 23:01:01 UTC
Severity:
normal
Tags:
#774063#5
Date:
2014-12-28 10:01:33 UTC
From:
To:
[This is basically #774062 =~ s/usb/pci/g]

update-pciids downloads a new /usr/share/misc/pci.ids file with probably
a different content and therefore a different md5sum, causing debsums to
fail on the pciutils package (see the bottom of this message).

While something like #544503 for pciutils (putting {pci,usb}.ids into a
(separate?) package in volatile) would be the better long-term solution
(as in: not downloading some random file from a random host without any
cryptographic verification and putting it into /usr/share) I'm proposing
to remove pci.ids from md5sums generation altogether for now.

- -- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages pciutils depends on:
ii  libc6    2.19-11
ii  libpci3  1:3.2.1-3

pciutils recommends no packages.

Versions of packages pciutils suggests:
ii  bzip2     1.0.6-7
ii  curl      7.38.0-2
ii  lynx-cur  2.8.9dev1-2
ii  wget      1.15-1+b1

- -- no debconf information

- -- debsums errors found:
debsums: changed file /usr/share/misc/pci.ids (from pciutils package)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=xTdp
-----END PGP SIGNATURE-----

#774063#12
Date:
2026-04-25 22:59:17 UTC
From:
To:
Hi!

Some time ago I split the pci.ids file into its own package. But if
there are no updates and the user wants a fresher version of the file
and uses the script, then this will still happen.

I'm not fond of removing the entry from the md5sums file though.

The solution I had in mind was to switch to use alternatives, so that
we'd automatically get the latest version based on the file version.
Such as with:

https://git.hadrons.org/cgit/debian/pkgs/pci.ids.git/log/?h=pu/alternatives
https://git.hadrons.org/cgit/debian/pkgs/pciutils.git/log/?h=pu/alternatives

But I've never merged that, because then the /usr/share/misc/pci.ids
file stops being known to dpkg, and it's hard to see who owns it.


While writing this reply, it occurred to me that perhaps a better
option could be to change the update-pciids to download the
pci.ids.deb package from Debian unstable and install that instead.
Which should have none of the alternatives downsides, and should
always be the latest version.

Thanks,
Guillem