-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I noticed the x86_64 XFree86 source has a bad MD5 sum and GPG signature. I've check a mirror and get the same result. I hadn't seen anybody else mention it on the list, so I thought I'd just ask about it. ===
# wget ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/XFree86-4.3.99.902-43.42.5.src.rpm
# rpm --checksig XFree86-4.3.99.902-43.42.5.src.rpm XFree86-4.3.99.902-43.42.5.src.rpm: sha1 MD5 GPG NOT OK ===
- -- Bernie Hoefer PGP e-mail is welcome! Get my 1024 bit signature key from: <http://pgpkeys.mit.edu:11371/pks/lookup?op=get&search=0x446A6F93>. "The more I know, the more I realize how much I do not understand." -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFClVznckGmqURqb5MRAvMIAJ0SeG7+vHjTfcuDjv8e+1Kjcdz7cACfS2lc RKrDYAVtyTKkNgnC3tSdt9k= =bCPd -----END PGP SIGNATURE-----
Bernie, It looks OK to me. I have checked a fresh download and one I downloaded some time ago and both are the same: # rpm --checksig XFree86* XFree86-4.3.99.902-43.42.5.src.rpm: sha1 md5 gpg OK XFree86-libs.spm: sha1 md5 gpg OK # ls -l XFree86-4.3.99.902-43.42.5.src.rpm -r--r--r-- 1 root root 45701544 Apr 4 16:26 XFree86-4.3.99.902-43.42.5.src.rpm # md5sum XFree86-4.3.99.902-43.42.5.src.rpm 84ff8faf14323791622af3b5642277bf XFree86-4.3.99.902-43.42.5.src.rpm Bob On Thu, 26 May 2005, Bernie Hoefer wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
I noticed the x86_64 XFree86 source has a bad MD5 sum and GPG signature. I've check a mirror and get the same result. I hadn't seen anybody else mention it on the list, so I thought I'd just ask about it.
===
# wget ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/XFree86-4.3.99.902-43.42.5.src.rpm
# rpm --checksig XFree86-4.3.99.902-43.42.5.src.rpm XFree86-4.3.99.902-43.42.5.src.rpm: sha1 MD5 GPG NOT OK ===
- -- Bernie Hoefer PGP e-mail is welcome! Get my 1024 bit signature key from: <http://pgpkeys.mit.edu:11371/pks/lookup?op=get&search=0x446A6F93>. "The more I know, the more I realize how much I do not understand."
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFClVznckGmqURqb5MRAvMIAJ0SeG7+vHjTfcuDjv8e+1Kjcdz7cACfS2lc RKrDYAVtyTKkNgnC3tSdt9k= =bCPd -----END PGP SIGNATURE-----
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
============================================================== Bob Vickers R.Vickers@cs.rhul.ac.uk Dept of Computer Science, Royal Holloway, University of London WWW: http://www.cs.rhul.ac.uk/home/bobv Phone: +44 1784 443691
It looks OK to me. I have checked a fresh download and one I downloaded some time ago and both are the same: === # md5sum XFree86-4.3.99.902-43.42.5.src.rpm 84ff8faf14323791622af3b5642277bf XFree86-4.3.99.902-43.42.5.src.rpm === Thanks for posting the MD5 hash for it, Bob. I should have done
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bob Vickers wrote: === that as well. Mine turned out to have a different hash than yours, so I downloaded it again. This time, it had the above hash and the GPG signature was good. I don't know why the ones I downloaded from the main SuSE FTP site and one of the mirrors was giving me the "MD5 GPG NOT OK" error. It was the only package that day out of several that I had downloaded that gave any errors. Thanks again. - -- Bernie Hoefer PGP e-mail is welcome! Get my 1024 bit signature key from: <http://pgpkeys.mit.edu:11371/pks/lookup?op=get&search=0x446A6F93>. "The more I know, the more I realize how much I do not understand." -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFClmEuckGmqURqb5MRApTaAJ96Y6euAxW8Ozhx+yXijBYli2YZwACfVM5n OP2BoRPM0/IvrWGOImI8gK8= =0MwB -----END PGP SIGNATURE-----
participants (2)
-
Bernie Hoefer -
Bob Vickers