Mailinglist Archive: opensuse-security (9 mails)

< Previous Next >
Re: [opensuse-security] strange digest verification errors
On Mon, Jul 18, 2011 at 05:15:30PM +0200, Hans-Peter Jansen wrote:

during some package updates from a 11.4-x86_64 system, I noticed some
digest verification errors, but only in security related packages:

Retrieving: libcares2-1.7.4-29.1.x86_64.rpm [done]
Digest verification failed for libcares2-1.7.4-29.1.x86_64.rpm. Expected
7a98495e2080a92d3ff0b7e59972c318b8788d7d9f69efc07ad6e261369224c6, found

Retrieving: libssh2-1-1.2.7-12.1.x86_64.rpm [done]
Digest verification failed for libssh2-1-1.2.7-12.1.x86_64.rpm. Expected
e8cc318266c32b7820efb858244282562605848b91eeef18ba37180400eb7cf4, found

Retrieving: libcurl4-7.21.7-60.1.x86_64.rpm [done (230.1 KiB/s)]
Digest verification failed for libcurl4-7.21.7-60.1.x86_64.rpm. Expected
3cd167cab18efa90062b43e5afb696dd650c2c62098fa752461bdbda7289e510, found
Continue? [yes/no] (no): y
Invalid answer 'y'. Enter 'y' for 'yes' or 'n' for 'no' if nothing else
works for you. [yes/no] (no):
Failed to provide Package libcurl4-7.21.7-60.1. Do you want to retry


Can't provide file './x86_64/libcurl4-7.21.7-60.1.x86_64.rpm' from
repository ''
- libcurl4-7.21.7-60.1.x86_64.rpm has wrong checksum

Abort, retry, ignore? [a/r/i] (a): i

As being shown in the last paragraph, they all came from

Is that something to be concerned about or is the repo under attack?

You might have hit it in the middle of a republish.

Does this still happen after you run "zypper refresh"?

Ciao, Marcus
To unsubscribe, e-mail: opensuse-security+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-security+help@xxxxxxxxxxxx

< Previous Next >
List Navigation
Follow Ups