[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [opensuse-security] strange digest verification errors

On Mon, Jul 18, 2011 at 05:15:30PM +0200, Hans-Peter Jansen wrote:
> Hi,
> during some package updates from a 11.4-x86_64 system, I noticed some 
> digest verification errors, but only in security related packages:
> Retrieving: libcares2-1.7.4-29.1.x86_64.rpm [done]
> Digest verification failed for libcares2-1.7.4-29.1.x86_64.rpm. Expected 
> 7a98495e2080a92d3ff0b7e59972c318b8788d7d9f69efc07ad6e261369224c6, found 
> a051c3bcf760baf230b975a4c4f5814a4c112e98b57ae281655bd8bd282c94fb.
> Retrieving: libssh2-1-1.2.7-12.1.x86_64.rpm [done]
> Digest verification failed for libssh2-1-1.2.7-12.1.x86_64.rpm. Expected 
> e8cc318266c32b7820efb858244282562605848b91eeef18ba37180400eb7cf4, found 
> b0b1beacfcbcd84f161a8ad39633bfe6eb597b303df6210a2a23f99b72653059.
> Retrieving: libcurl4-7.21.7-60.1.x86_64.rpm [done (230.1 KiB/s)]
> Digest verification failed for libcurl4-7.21.7-60.1.x86_64.rpm. Expected 
> 3cd167cab18efa90062b43e5afb696dd650c2c62098fa752461bdbda7289e510, found 
> 88d094b4b5f50dc402fd17258a21f74e39bd616d26e2296298254ea4b2364575. 
> Continue? [yes/no] (no): y
> Invalid answer 'y'. Enter 'y' for 'yes' or 'n' for 'no' if nothing else 
> works for you. [yes/no] (no): 
> Failed to provide Package libcurl4-7.21.7-60.1. Do you want to retry 
> retrieval?
> [download.opensuse.org-python|
> http://download.opensuse.org/repositories/devel:/languages:/python/openSUSE_11.4/] 
> Can't provide file './x86_64/libcurl4-7.21.7-60.1.x86_64.rpm' from 
> repository 'download.opensuse.org-python'
> History:
>  - libcurl4-7.21.7-60.1.x86_64.rpm has wrong checksum
> Abort, retry, ignore? [a/r/i] (a): i
> As being shown in the last paragraph, they all came from 
> devel:languages:python. 
> Is that something to be concerned about or is the repo under attack?

You might have hit it in the middle of a republish.

Does this still happen after you run "zypper refresh"?

Ciao, Marcus
To unsubscribe, e-mail: opensuse-security+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-security+help@xxxxxxxxxxxx