[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [suse-security] Bad MD5 & GPG on XFree86 SRC



Bernie,

It looks OK to me. I have checked a fresh download and one I downloaded
some time ago and both are the same:

# rpm --checksig XFree86*
XFree86-4.3.99.902-43.42.5.src.rpm: sha1 md5 gpg OK
XFree86-libs.spm: sha1 md5 gpg OK

# ls -l XFree86-4.3.99.902-43.42.5.src.rpm
-r--r--r--  1 root root 45701544 Apr  4 16:26 XFree86-4.3.99.902-43.42.5.src.rpm

# md5sum XFree86-4.3.99.902-43.42.5.src.rpm
84ff8faf14323791622af3b5642277bf  XFree86-4.3.99.902-43.42.5.src.rpm

Bob

On Thu, 26 May 2005, Bernie Hoefer wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>      I noticed the x86_64 XFree86 source has a bad MD5 sum and GPG
> signature.  I've check a mirror and get the same result.  I hadn't
> seen anybody else mention it on the list, so I thought I'd just ask
> about it.
>
> ===
> > # wget ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/XFree86-4.3.99.902-43.42.5.src.rpm
> >
> > # rpm --checksig XFree86-4.3.99.902-43.42.5.src.rpm
> > XFree86-4.3.99.902-43.42.5.src.rpm: sha1 MD5 GPG NOT OK
> ===
>
> - --
> Bernie Hoefer
> PGP e-mail is welcome!  Get my 1024 bit signature key from:
> <http://pgpkeys.mit.edu:11371/pks/lookup?op=get&search=0x446A6F93>.
> "The more I know, the more I realize how much I do not understand."
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (GNU/Linux)
>
> iD8DBQFClVznckGmqURqb5MRAvMIAJ0SeG7+vHjTfcuDjv8e+1Kjcdz7cACfS2lc
> RKrDYAVtyTKkNgnC3tSdt9k=
> =bCPd
> -----END PGP SIGNATURE-----
>
> --
> Check the headers for your unsubscription address
> For additional commands, e-mail: suse-security-help@xxxxxxxx
> Security-related bug reports go to security@xxxxxxx, not here
>

==============================================================
Bob Vickers                     R.Vickers@xxxxxxxxxxxxx
Dept of Computer Science, Royal Holloway, University of London
WWW:    http://www.cs.rhul.ac.uk/home/bobv
Phone:  +44 1784 443691

-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here