https://bugzilla.novell.com/show_bug.cgi?id=741979 https://bugzilla.novell.com/show_bug.cgi?id=741979#c2 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |security-team@suse.de AssignedTo|security-team@suse.de |ro@suse.com --- Comment #2 from Ludwig Nussel 2012-01-30 10:34:47 CET --- This was actually supposed to be fixed already. krb5 on gwdg still has the wrong checksum though. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=741979 https://bugzilla.novell.com/show_bug.cgi?id=741979#c4 Adrian Schröter changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |adrian@suse.com --- Comment #4 from Adrian Schröter 2012-01-30 10:31:53 UTC --- I touched the files, so the next sync should enforce to mirror it out to all mirror. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=741979 https://bugzilla.novell.com/show_bug.cgi?id=741979#c6 --- Comment #6 from Herbert Meier 2012-01-30 22:53:54 UTC --- Created an attachment (id=473353) --> (http://bugzilla.novell.com/attachment.cgi?id=473353) One more broken file At least if you compare the gwdg.de mirror to another mirror, you will find many more packages and gwdg.de is not the only one affected. But maybe this has also to be fixed at the source: Why are these packages signed two times within one second?

From the signing date the file on gwdg.de is the good/new one!

-- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=741979 https://bugzilla.novell.com/show_bug.cgi?id=741979#c8 --- Comment #8 from Herbert Meier 2012-02-01 22:33:29 UTC --- Just another example: Yesterday, I downloaded kernel-default-3.1.9-1.4.1.x86_64.rpm from widehat.opensuse.org, ftp.gwdg.de and from ftp.halifax.rwth-aachen.de, all versions had time stamp and signature "Fr 27 Jan 2012 17:52:52". Today the files were newly downloaded and have time stamp and signature "Fr 27 Jan 2012 17:59:41". File size is identical and the old and new files differ only in the first 832 bytes. A diff between widehat.opensuse.org/update/12.1/x86_64 and ftp.gwdg.de/pub/opensuse/update/12.1/x86_64 reveals 140 files that differ. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=741979 https://bugzilla.novell.com/show_bug.cgi?id=741979#c Ruediger Oertel changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|ro@suse.com |adrian@suse.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.