openSUSE Users

Download

users@lists.opensuse.org

September 2022

47 participants
32 discussions

Wow - openSUSE Leap Micro Blew UP the Announce List!
by David C. Rankin 02 Sep '22

02 Sep '22

I think we have a record - 36+ moderate or important security updates within a 2 hour window. I guess there was something the plagued the container world that was dramatic. -- David C. Rankin, J.D.,P.E.

1 0

15.4 - Just Tried Update -- All repos UNSIGNED -- what gives?
by David C. Rankin 01 Sep '22

01 Sep '22

All, Just tried to update 15.4 after looking at the security updates on the announce list. However when I tried to update, every single File 'repomd.xml' was unsigned, e.g.: Warning: File 'repomd.xml' from repository 'SLE 15 update' is unsigned. Note: Signing data enables the recipient to verify that no modifications occurred after the data were signed. Accepting data with no, wrong or unknown signature can lead to a corrupted system and in extreme cases even to a system compromise. Note: File 'repomd.xml' is the repositories master index file. It ensures the integrity of the whole repo. Warning: We can't verify that no one meddled with this file, so it might not be trustworthy anymore! You should not continue unless you know it's safe. File 'repomd.xml' from repository 'SLE 15 update' is unsigned, continue? [yes/no] (no): n Retrieving repository 'SLE 15 update' metadata .............................................................[error] Repository 'SLE 15 update' is invalid. [repo-sle-update|http://download.opensuse.org/update/leap/15.4/sle/] Valid metadata not found at specified URL History: - Signature verification failed for repomd.xml - Can't provide /repodata/repomd.xml Please check if the URIs defined for this repository are pointing to a valid repository. Warning: Skipping repository 'SLE 15 update' because of the above error. What's up with the signature failures? Mirrors out of sync? -- David C. Rankin, J.D.,P.E.

4 4