On 2016-05-04 19:45, Pat Riehecky wrote: > > > On 05/04/2016 12:39 PM, olli hauer wrote: >> On 2016-05-04 15:31, Pat Riehecky wrote: >>> Synopsis: Moderate: kernel security, bug fix, and enhancement >>> Advisory ID: SLSA-2016:0715-1 >>> Issue Date: 2016-05-04 >>> CVE Numbers: CVE-2015-5157 >>> CVE-2015-8767 >>> -- >>> >> ... >> >> Hi Pat / SL Team, >> >> don't know if it is a local issue on my site, but after the last rsync of >> the 6rolling, 6x and 6.7 repo I get again a checksum mismatch. >> >> Comparing the sha256 values from >> $repo/x86_64/updates/security/repodata/repomd.xml with the calculated sha256 >> in the directory does not match any of the files. >> >> In case it is useful as additional info, I've synced directly from >> rsync.scientificlinux.org (sldist.fnal.gov) IPv4: 131.225.105.11 some >> minutes ago. >> >> Perhaps someone can do a manual cross check? >> > > The files on the server seem to match what is expected. Can I have you try a > yum clean all? > > Pat > > linux/scientific/6.7/x86_64/updates/security/repodata > [riehecky@testify repodata]$ sha256sum * > 28ae1141d5fab86d48ec456fb9766d875050105cd77a5679a1883181d1c1b518 > filelists.sqlite.bz2 > 04994a859d615f7cc1d5cf8027b2417412a29b739941aa6c9136a8877741fa9c > filelists.xml.gz > 7973023955f2cc583c25f6ed59c22a215ed19151f903c6eea3cb0bacdc736cf9 > other.sqlite.bz2 > ec84e4610ee81c3387bc9cda4217cec520fa3248861e3d2efc80a22e64da6be3 other.xml.gz > 2d3ee225327745cb43e9874c2d5fcb58411c178e9654be1619e6cab4ad1056f1 > primary.sqlite.bz2 > 2528e5f97add7874d159ef687bd4ff9e7f256381b022c692b37c55c33d3aecd7 > primary.xml.gz > abc1c989aa3ae37f47b3c39a0ecb8dbc19becb06f1bbb0e1fa31f8a12563e061 repomd.xml > de6609b12d04d98fa4c9c3d6801dac80d46c19b00cf1dbb03935d2e4eaeb915d > updateinfo.xml > d574666081cc0e3275c4bd6d6dca49f95751cad3b6512ec5b4465aac9a7599a2 > updateinfo.xml.bz2 > [riehecky@testify repodata]$ cat repomd.xml ...
Thanks for your quick response ! Hm, strange all except the checksum for repomd.xml where matching, I've move the file out of the repodata folder, done a resync three or four times ... Not I got a different one that matches the checksums. Comparing both files they have a small time difference recorded. $ diff -u repomd.xml.old repomd.xml | grep timestamp - <timestamp>1462368210</timestamp> + <timestamp>1462368259</timestamp> - <timestamp>1462369635.09</timestamp> + <timestamp>1462369638.19</timestamp> - <timestamp>1462368209</timestamp> + <timestamp>1462368259</timestamp> - <timestamp>1462368210</timestamp> + <timestamp>1462368259</timestamp> - <timestamp>1462368277</timestamp> + <timestamp>1462368299</timestamp> - <timestamp>1462368264</timestamp> + <timestamp>1462368299</timestamp> - <timestamp>1462368264</timestamp> + <timestamp>1462368299</timestamp> Maybe that's the same issue users reported some weeks ago on the list ? In case you are interested in both files, I can send you a copy -- olli
