[Bug 1008325] New: Zypp fails to handle repositories signed with a GPG subkey - openSUSE Bugs - openSUSE Mailing Lists

newer
[Bug 1036659] PackageKit deletes...

[Bug 1008325] New: Zypp fails to handle repositories signed with a GPG subkey

older
[Bug 1093567] kactivity...

bugzilla_noreply＠novell.com

3 Nov 2016 3 Nov '16

13:44

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Bug ID: 1008325 Summary: Zypp fails to handle repositories signed with a GPG subkey Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: libzypp Assignee: zypp-maintainers@forge.provo.novell.com Reporter: ma@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- [posted on zypp-devel]

I was confused earlier today when trying to add a GPG-signed rpm-md type repository to my system. I noticed that zypper was listing the repository as not being signed. zypper refresh was telling me that the repository was signed with an unknown key and zypper lr was listing the repository as not supporting repo_gpgcheck.

After some digging around the libzypper source (14.43.0) on my system (openSUSE 13.2) I believe I've tracked down the issue.

The call to publicKeyExists in KeyRing::Impl::verifyFileSignatureWorkflow checks if the repomd.xml.asc signature's key ID is known. If the repomd.xml.asc was signed with a subkey of a GPG key (instead of a primary key), this check will fail even though the call to VerifyFile would succeed.

Not sure what the best solution is for zypper, but one potential solution would be to simply ask GPG to verify the signature using the general keyring without first checking if a matching key id is in the keyring. The logic in verifyFileSignatureWorkflow can then be simplified as GPG would figure out if there's a matching key and this issue would be avoided.

-- You are receiving this mail because: You are on the CC list for the bug.

Attachments:

attachment.htm (text/html — 3.4 KB)

Reply

Sign in to reply online Use email software

Show replies by date

bugzilla_noreply＠novell.com

29 Jul 29 Jul

10:08

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 http://bugzilla.suse.com/show_bug.cgi?id=1008325#c1 Dave Corrie changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |suse@davecorrie.com --- Comment #1 from Dave Corrie --- I have a feeling that this is currently affecting the google-chrome linux repostory at: http://dl.google.com/linux/chrome/rpm/stable/x86_64 I saw a request for for some more info on the zypp-devel mailing list: https://lists.opensuse.org/zypp-devel/2016-11/msg00000.html I will attach copies of the following data, downloaded at 2017-07-29 10:03 UTC: http://dl.google.com/linux/chrome/rpm/stable/x86_64/repodata/repomd.xml https://dl.google.com/linux/linux_signing_key.pub -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

10:10

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 http://bugzilla.suse.com/show_bug.cgi?id=1008325#c2 --- Comment #2 from Dave Corrie --- Created attachment 734453 --> http://bugzilla.suse.com/attachment.cgi?id=734453&action=edit Google's repomd.xml -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

10:11

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 http://bugzilla.suse.com/show_bug.cgi?id=1008325#c3 --- Comment #3 from Dave Corrie --- Created attachment 734454 --> http://bugzilla.suse.com/attachment.cgi?id=734454&action=edit Google's Linux Packages Signing Authority Key -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

3 Aug 3 Aug

13:08

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Stefan Behlert changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |behlert@suse.com -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

13:11

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Michael Andres changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

21 Aug 21 Aug

17:08

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 kolA flash changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kolAflash@kolAhilft.de -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

28 Aug 28 Aug

14:39

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |ibs:running:5510:important -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

14:43

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 http://bugzilla.suse.com/show_bug.cgi?id=1008325#c18 Michael Andres changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #18 from Michael Andres --- . -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

29 Aug 29 Aug

14:41

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:5510:important |ibs:running:5510:important | |ibs:running:5479:moderate -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

4 Sep 4 Sep

09:55

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 http://bugzilla.suse.com/show_bug.cgi?id=1008325#c20 --- Comment #20 from Michael Andres --- fixed SLE-12-SP1 libzypp 15.25.2 SLE-12 libzypp 14.45.6 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

14:38

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:5510:important |ibs:running:5479:moderate |ibs:running:5479:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

19:42

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 http://bugzilla.suse.com/show_bug.cgi?id=1008325#c21 --- Comment #21 from Swamp Workflow Management --- SUSE-SU-2017:2344-1: An update that solves one vulnerability and has 6 fixes is now available. Category: security (important) Bug References: 1008325,1038984,1045735,1047785,1054088,1054671,1055920 CVE References: CVE-2017-7436 Sources used: SUSE Linux Enterprise Software Development Kit 12-SP3 (src): libzypp-16.15.6-2.8.1 SUSE Linux Enterprise Server 12-SP3 (src): libzypp-16.15.6-2.8.1, zypper-1.13.32-21.3.2 SUSE Linux Enterprise Desktop 12-SP3 (src): libzypp-16.15.6-2.8.1, zypper-1.13.32-21.3.2 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

22:36

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:5479:moderate |ibs:running:5479:moderate | |ibs:running:5554:moderate | |ibs:running:5553:moderate -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

22:43

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:5479:moderate |ibs:running:5479:moderate |ibs:running:5554:moderate |ibs:running:5554:moderate |ibs:running:5553:moderate |ibs:running:5553:moderate | |obs:running:7236:important -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

5 Sep 5 Sep

22:45

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:5479:moderate |ibs:running:5479:moderate |ibs:running:5554:moderate |ibs:running:5554:moderate |ibs:running:5553:moderate |ibs:running:5553:moderate |obs:running:7236:important | -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

6 Sep 6 Sep

01:15

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 http://bugzilla.suse.com/show_bug.cgi?id=1008325#c23 --- Comment #23 from Swamp Workflow Management --- openSUSE-SU-2017:2370-1: An update that solves one vulnerability and has 6 fixes is now available. Category: security (important) Bug References: 1008325,1038984,1045735,1047785,1054088,1054671,1055920 CVE References: CVE-2017-7436 Sources used: openSUSE Leap 42.3 (src): libzypp-16.15.6-12.1, zypper-1.13.32-8.1 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

14 Sep 14 Sep

16:09

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 http://bugzilla.suse.com/show_bug.cgi?id=1008325#c26 --- Comment #26 from Swamp Workflow Management --- SUSE-RU-2017:2462-1: An update that has 5 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1008325,1045735,1054088,1054671,1055920 CVE References: Sources used: SUSE Linux Enterprise Software Development Kit 12-SP2 (src): libzypp-16.15.6-27.28.2 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (src): libzypp-16.15.6-27.28.2, zypper-1.13.32-18.16.3 SUSE Linux Enterprise Server 12-SP2 (src): libzypp-16.15.6-27.28.2, zypper-1.13.32-18.16.3 SUSE Linux Enterprise Desktop 12-SP2 (src): libzypp-16.15.6-27.28.2, zypper-1.13.32-18.16.3 SUSE Container as a Service Platform ALL (src): libzypp-16.15.6-27.28.2, zypper-1.13.32-18.16.3 OpenStack Cloud Magnum Orchestration 7 (src): libzypp-16.15.6-27.28.2, zypper-1.13.32-18.16.3 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

22:38

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:5479:moderate |ibs:running:5554:moderate |ibs:running:5554:moderate |ibs:running:5553:moderate |ibs:running:5553:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

22:56

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:5554:moderate |ibs:running:5554:moderate |ibs:running:5553:moderate |ibs:running:5553:moderate | |obs:running:7273:moderate -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

15 Sep 15 Sep

06:42

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:5554:moderate |ibs:running:5554:moderate |ibs:running:5553:moderate |ibs:running:5553:moderate |obs:running:7273:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

10:12

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 http://bugzilla.suse.com/show_bug.cgi?id=1008325#c28 --- Comment #28 from Swamp Workflow Management --- openSUSE-RU-2017:2484-1: An update that has 5 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1008325,1045735,1054088,1054671,1055920 CVE References: Sources used: openSUSE Leap 42.2 (src): libzypp-16.15.6-5.12.1, zypper-1.13.32-5.12.1 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

19 Sep 19 Sep

14:38

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:5554:moderate |ibs:running:5554:moderate |ibs:running:5553:moderate |ibs:running:5553:moderate | |ibs:running:5680:moderate -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

26 Oct 26 Oct

22:35

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:5554:moderate |ibs:running:5554:moderate |ibs:running:5553:moderate |ibs:running:5553:moderate |ibs:running:5680:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

27 Oct 27 Oct

01:08

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 http://bugzilla.suse.com/show_bug.cgi?id=1008325#c29 --- Comment #29 from Swamp Workflow Management --- SUSE-SU-2017:2861-1: An update that solves three vulnerabilities and has 22 fixes is now available. Category: security (moderate) Bug References: 1005063,1008325,1009269,1012523,1025176,1028485,1032680,1036659,1042781,1045628,1045735,1050767,1050943,1054028,1054088,1054671,1055920,1056995,1060653,1061876,1063824,903543,978055,998893,999878 CVE References: CVE-2017-1000254,CVE-2017-1000257,CVE-2017-11462 Sources used: SUSE Container as a Service Platform ALL (src): sles12-mariadb-docker-image-1.1.0-2.5.19, sles12-pause-docker-image-1.1.0-2.5.21, sles12-pv-recycler-node-docker-image-1.1.0-2.5.19, sles12-salt-api-docker-image-1.1.0-2.5.19, sles12-salt-master-docker-image-1.1.0-4.5.18, sles12-salt-minion-docker-image-1.1.0-2.5.18, sles12-velum-docker-image-1.1.0-4.5.18 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

18 Jan 18 Jan

23:08

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 http://bugzilla.suse.com/show_bug.cgi?id=1008325#c31 --- Comment #31 from Swamp Workflow Management --- SUSE-RU-2018:0138-1: An update that has 7 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1008325,1036659,1043218,1064999,1068708,1071466,969569 CVE References: Sources used: SUSE OpenStack Cloud 6 (src): libzypp-15.25.6-46.9.1 SUSE Linux Enterprise Server for SAP 12-SP1 (src): libzypp-15.25.6-46.9.1 SUSE Linux Enterprise Server 12-SP1-LTSS (src): libzypp-15.25.6-46.9.1 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

23 Jan 23 Jan

23:45

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:5554:moderate |ibs:running:5553:moderate |ibs:running:5553:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

27 Feb 27 Feb

15:17

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 http://bugzilla.suse.com/show_bug.cgi?id=1008325#c32 Christos Varelas changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED CC| |christos.varelas@suse.com Resolution|FIXED |--- --- Comment #32 from Christos Varelas --- While working on SUSE:Maintenance:5553:155577 I discovered that the bug is not fixed -- please see this excerpt from the test-report: BEFORE ~~~~~~ rr5553:~ # zypper ar http://dl.google.com/linux/chrome/rpm/stable/x86_64 google-chrome-stable Adding repository 'google-chrome-stable' ................[done] Repository 'google-chrome-stable' successfully added Enabled : Yes Autorefresh : No GPG Check : Yes URI : http://dl.google.com/linux/chrome/rpm/stable/x86_64 rr5553:~ # zypper ref Retrieving repository 'google-chrome-stable' metadata ------[\] File 'repomd.xml' from repository 'google-chrome-stable' is signed with an unknown key '1397BC53640DB551'. Continue? [yes/no] (no): yes ^^^^^ this is due to the bug Retrieving repository 'google-chrome-stable' metadata ...[done] Building repository 'google-chrome-stable' cache ........[done] [...] All repositories have been refreshed. AFTER ~~~~~ rr5553:~ # zypper ar http://dl.google.com/linux/chrome/rpm/stable/x86_64 google-chrome-stable Adding repository 'google-chrome-stable' ................[done] Repository 'google-chrome-stable' successfully added Enabled : Yes Autorefresh : No GPG Check : Yes URI : http://dl.google.com/linux/chrome/rpm/stable/x86_64 rr5553:~ # zypper ref Retrieving repository 'google-chrome-stable' metadata ------[\] File 'repomd.xml' from repository 'google-chrome-stable' is signed with an unknown key '1397BC53640DB551'. Continue? [yes/no] (no): yes ^^^^^ this is due to the bug, looks like it is not fixed Retrieving repository 'google-chrome-stable' metadata ...[done] Building repository 'google-chrome-stable' cache ........[done] [...] All repositories have been refreshed. => Bug does NOT seem to fixed Please, see also Peter's comment: https://bugzilla.suse.com/show_bug.cgi?id=1008325#c30 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

15:58

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 http://bugzilla.suse.com/show_bug.cgi?id=1008325#c33 Michael Andres changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution|--- |FIXED --- Comment #33 from Michael Andres ---

root@fibonacci:~ (4) $ zypper -v ref google-chrome-stable Verbosity: 1 ... Checking whether to refresh metadata for google-chrome-stable Retrieving: repomd.xml.asc ..................[done] Retrieving: repomd.xml.key .............[not found] Retrieving: repomd.xml ......................[done] Warning: File 'repomd.xml' from repository 'google-chrome-stable' is signed with an unknown key '1397BC53640DB551'.

The repo provides no .key file, so the message is right. -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

16 May 16 May

14:38

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|ibs:running:5553:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

19:07

New subject: [Bug 1008325] Zypp fails to handle repositories signed with a GPG subkey

http://bugzilla.suse.com/show_bug.cgi?id=1008325 http://bugzilla.suse.com/show_bug.cgi?id=1008325#c34 --- Comment #34 from Swamp Workflow Management --- SUSE-RU-2018:1307-1: An update that has 10 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1008325,1033236,1036659,1038132,1043218,1068708,1074687,1076415,1079334,637791 CVE References: Sources used: SUSE Linux Enterprise Server 12-LTSS (src): libzypp-14.45.10-2.73.1, zypper-1.11.66-2.64.1 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

2182

Age (days ago)

2741

Last active (days ago)

Download

30 comments

1 participants

tags

participants (1)

bugzilla_noreply＠novell.com