OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Vox (voxthe-vox.com)
Date: Mon Feb 12 2001 - 12:40:28 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    During the bombing raid on Mon, 12 Feb 2001 09:52:13 -0700, Vincent Danen was
    heard mumbling in fear::

    > On Mon Feb 12, 2001 at 02:33:32AM -0600, Vox wrote:
    >
    > > I just re-installed mdk7.2 in my box after getting a new HD, and when I
    > > went to do the sec upgrades after the install, found out that
    > > glibc-2.1.3-18.3mdk.i586.rpm was giving me "error while checking dependencies"
    > > I went to /var/cache/grpmi and noticed that:
    > >
    > > [rootvox grpmi]# ls -l glibc-2.1.3-18.3mdk.i586.rpm
    > > -rw-r--r-- 1 root root 3733043 Feb 12 02:28
    > > glibc-2.1.3-18.3mdk.i586.rpm
    > >
    > > while MUpdate said that it should be 12megs....I checked several
    > > mirrors, and they all have the same size...my guess is that the rpm got
    > > truncated in the main mirror and everybody else got it when they checked for
    > > changes, since it was the correct size when it was first put out.
    > >
    > > So...could somebody at MandrakeSoft fix this? I hate haveing a sec hole
    > > that is known and fixed :)
    >
    > That's the right size. Did you get the other glibc rpms? glibc-devel
    > and glibc-profile?
    >
    > I show here:
    >
    > -rw-r--r-- 1 502 vdanen 3733043 Jan 18 12:15 /share/updates/7.2/RPMS/glibc-2.1.3-18.3mdk.i586.rpm
    > -rw-r--r-- 1 502 vdanen 8947707 Jan 18 12:16 /share/updates/7.2/RPMS/glibc-devel-2.1.3-18.3mdk.i586.rpm
    > -rw-r--r-- 1 502 vdanen 7037880 Jan 18 12:17 /share/updates/7.2/RPMS/glibc-profile-2.1.3-18.3mdk.i586.rpm
    >
    > Those are correct sizes. You can also run "rpm --checksig" on the
    > files and it will tell you if the md5's are incorrect or if the
    > package is damaged at all.
    >

            Ok, then the rpm isn't truncated....and yes, I got all 3 of
    them.....and still, if I try to rpm -Uvh or -Fvh by hand, I get:

    [rootvox grpmi]# rpm -Uvh glib
    glibc-2.1.3-18.3mdk.i586.rpm glibc-profile-2.1.3-18.3mdk.i586.rpm
    glibc-devel-2.1.3-18.3mdk.i586.rpm
    [rootvox grpmi]# rpm -Uvh glibc-*
    cannot read header at 0 for dependency check

            Even after doing a -Kvv that seems to be correct

    [rootvox grpmi]# rpm -Kvv glibc-2.1.3-18.3mdk.i586.rpm
    D: New Header signature
    D: Signature size: 149
    D: Signature pad : 3
    D: sigsize : 152
    D: Header + Archive: 3732795
    D: expected size : 3732795
    glibc-2.1.3-18.3mdk.i586.rpm:
    MD5 sum OK: 52c15b5d4a55c51d468665314a99de05
    gpg: Signature made Thu 18 Jan 2001 01:58:41 PM CST using DSA key ID 22458A98
    gpg: Good signature from "Linux Mandrake Security Team
    <securitylinux-mandrake.com>"
    gpg: WARNING: This key is not certified with a trusted signature!
    gpg: There is no indication that the signature belongs to the owner.
    gpg: Fingerprint: BB73 7822 CB91 B327 2191 68CC 9AA8 D0D0 2245 8A98

            (I'm guessing the gpg error comes from the fact that I have no gpg
    installed)

            So....now I'm clueless about this....any ideas from anybody?

            Vox

    -- 
    Pain is the gift of the gods, and I'm the one they chose as their messenger....
    For info on safety in the BDSM lifestyle http://www.the-vox.com
    

    Think of the Linux community as a niche economy isolated by its beliefs. Kind of like the Amish, except that our religion requires us to use _higher_ technology than everyone else. -- Donald B. Marti Jr.

    Vox populi, vox deii....