[Bug 1014265] New: Zypper: "unblock" a package with bad digest has no effect - openSUSE Bugs - openSUSE Mailing Lists

newer
[Bug 1024909] zypper outputs...

[Bug 1014265] New: Zypper: "unblock" a package with bad digest has no effect

older
[Bug 1010712] zypper outputs...

bugzilla_noreply＠novell.com

7 Dec 2016 7 Dec '16

15:00

http://bugzilla.suse.com/show_bug.cgi?id=1014265 Bug ID: 1014265 Summary: Zypper: "unblock" a package with bad digest has no effect Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening@forge.provo.novell.com Reporter: hguo@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- When user attempts to install a package with bad digest, zypper says: ================= Warning: Digest verification failed for file 'xxxxx' [xxxxx.rpm] expected aaaaa but got bbbbb Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise. However if you made certain that the file with checksum 'aaaa..' is secure, correct and should be used within this operation, enter the first 4 characters of the checksum to unblock using this file on your own risk. Empty input will discard the file. ======================== By answering the checksum back to zypper, it should proceed to install the package, however it isn't happening: ======================== Unblock or discard? [aaaa/? shows all options] (discard): aaaa Package xxxxxx seems to be corrupted during transfer. Do you want to retry retrieval? Abort, retry, ignore? [a/r/i] (a): i Installation has completed with error. ======================== Previously zypper would proceed to install the package given the digest value is answered. This is a regression. -- You are receiving this mail because: You are on the CC list for the bug.

Attachments:

attachment.htm (text/html — 3.2 KB)

Reply

Sign in to reply online Use email software

Show replies by date

bugzilla_noreply＠novell.com

7 Dec 7 Dec

15:00

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 Howard Guo changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Zypper: "unblock" a package |Zypper: regression in |with bad digest has no |digest verification |effect |override, "unblock" a | |package with bad digest | |does not proceed to install | |the package -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

8 Dec 8 Dec

09:25

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 Chenzi Cao changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bnc-team-screening@forge.pr |zypp-maintainers@forge.prov |ovo.novell.com |o.novell.com -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

13:10

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 Michael Andres changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P2 - High Status|NEW |CONFIRMED Severity|Normal |Major -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

14:59

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 http://bugzilla.suse.com/show_bug.cgi?id=1014265#c1 --- Comment #1 from Michael Andres --- Seems to be broken back to SLE12. -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

15 Dec 15 Dec

14:29

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 http://bugzilla.suse.com/show_bug.cgi?id=1014265#c2 Michael Andres changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #2 from Michael Andres --- Fixed in: TRUNK libzypp 16.3.2 SLE-12-SP2 libzypp 16.3.2 Code-42_2 libzypp 16.3.2 SLE-12-SP1 libzypp 15.23.2 Code-42_1 libzypp 15.23.2 SLE-12 libzypp 14.44.2 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

16 Dec 16 Dec

07:22

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |ibs:running:3458:low | |ibs:running:3630:moderate -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

18 Dec 18 Dec

15:19

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:3458:low |ibs:running:3458:low |ibs:running:3630:moderate |ibs:running:3630:moderate | |ibs:running:3837:low -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

4 Jan 4 Jan

11:17

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:3458:low |ibs:running:3630:moderate |ibs:running:3630:moderate |ibs:running:3837:low |ibs:running:3837:low | -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

15:09

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 http://bugzilla.suse.com/show_bug.cgi?id=1014265#c3 --- Comment #3 from Swamp Workflow Management --- SUSE-RU-2017:0019-1: An update that has 9 recommended fixes can now be installed. Category: recommended (low) Bug References: 1003748,1004096,1007273,1010712,1010952,1014265,731333,975777,975794 CVE References: Sources used: SUSE Linux Enterprise Software Development Kit 12-SP2 (src): libsolv-0.6.24-2.25.3, libzypp-16.3.2-25.1 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (src): libsolv-0.6.24-2.25.3, libzypp-16.3.2-25.1, zypper-1.13.14-16.9 SUSE Linux Enterprise Server 12-SP2 (src): libsolv-0.6.24-2.25.3, libzypp-16.3.2-25.1, zypper-1.13.14-16.9 SUSE Linux Enterprise Desktop 12-SP2 (src): libsolv-0.6.24-2.25.3, libzypp-16.3.2-25.1, zypper-1.13.14-16.9 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

15:15

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:3630:moderate |ibs:running:3630:moderate |ibs:running:3837:low |ibs:running:3837:low | |obs:running:6156:low -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

7 Jan 7 Jan

21:19

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:3630:moderate |ibs:running:3630:moderate |ibs:running:3837:low |ibs:running:3837:low |obs:running:6156:low | -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

8 Jan 8 Jan

00:09

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 http://bugzilla.suse.com/show_bug.cgi?id=1014265#c4 --- Comment #4 from Swamp Workflow Management --- openSUSE-RU-2017:0060-1: An update that has 9 recommended fixes can now be installed. Category: recommended (low) Bug References: 1003748,1004096,1007273,1010712,1010952,1014265,731333,975777,975794 CVE References: Sources used: openSUSE Leap 42.2 (src): libsolv-0.6.24-3.1, libzypp-16.3.2-3.1, zypper-1.13.14-3.1 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

27 Mar 27 Mar

14:40

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:3630:moderate |ibs:running:3630:moderate |ibs:running:3837:low |ibs:running:3837:moderate -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

29 Mar 29 Mar

19:12

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 http://bugzilla.suse.com/show_bug.cgi?id=1014265#c5 --- Comment #5 from Swamp Workflow Management --- SUSE-RU-2017:0861-1: An update that has 11 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1007273,1010712,1014265,1024909,1025440,1028492,1030136,1030827,1030919,731333,926844 CVE References: Sources used: SUSE Linux Enterprise Software Development Kit 12-SP1 (src): libsolv-0.6.26-2.39.1, libzypp-15.24.2-42.1 SUSE Linux Enterprise Server 12-SP1 (src): libsolv-0.6.26-2.39.1, libzypp-15.24.2-42.1, zypper-1.12.50-40.3 SUSE Linux Enterprise Desktop 12-SP1 (src): libsolv-0.6.26-2.39.1, libzypp-15.24.2-42.1, zypper-1.12.50-40.3 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

22:37

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:3630:moderate |ibs:running:3837:moderate |ibs:running:3837:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

4 Apr 4 Apr

14:41

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:3837:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

16:15

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 http://bugzilla.suse.com/show_bug.cgi?id=1014265#c6 --- Comment #6 from Swamp Workflow Management --- SUSE-RU-2017:0930-1: An update that has 7 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1014265,1024909,1028492,1030136,1030827,1030919,985390 CVE References: Sources used: SUSE Linux Enterprise Server for SAP 12 (src): libsolv-0.6.22-2.22.8.1, libzypp-14.45.3-2.62.2, zypper-1.11.62-2.56.3 SUSE Linux Enterprise Server 12-LTSS (src): libsolv-0.6.22-2.22.8.1, libzypp-14.45.3-2.62.2, zypper-1.11.62-2.56.3 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

5 Apr 5 Apr

16:14

New subject: [Bug 1014265] Zypper: regression in digest verification override, "unblock" a package with bad digest does not proceed to install the package

http://bugzilla.suse.com/show_bug.cgi?id=1014265 http://bugzilla.suse.com/show_bug.cgi?id=1014265#c7 --- Comment #7 from Swamp Workflow Management --- openSUSE-RU-2017:0938-1: An update that has 11 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1007273,1010712,1014265,1024909,1025440,1028492,1030136,1030827,1030919,731333,926844 CVE References: Sources used: openSUSE Leap 42.1 (src): libsolv-0.6.26-19.1, libzypp-15.24.2-19.2, zypper-1.12.50-19.1 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

2585

Age (days ago)

2704

Last active (days ago)

Download

18 comments

1 participants

tags

participants (1)

bugzilla_noreply＠novell.com