#5898 Corrupted thunderbird package for Fedora 19 i386
Closed: Fixed None Opened 9 years ago by mschwendt.

A corrupted package for Fedora 19 i386 has founds its way onto the download mirrors. Could this be investigated and fixed?

http://dl.fedoraproject.org/pub/fedora/linux/updates/19/i386/thunderbird-24.5.0-1.fc19.i686.rpm

{{{
$ rpm -Kv thunderbird-24.5.0-1.fc19.i686.rpm
thunderbird-24.5.0-1.fc19.i686.rpm:
Header V3 RSA/SHA256 Signature, key ID fb4b18e6: NOKEY
Header SHA1 digest: OK (dde21ed383e5eca5d85cad68ec3e189d3dcfd80d)
V3 RSA/SHA256 Signature, key ID fb4b18e6: BAD
MD5 digest: BAD Expected(db58f29a674c9ac24d39cd7247c481a4) != (8b50ee8e3ba29c5434cb9204a804da41)
}}}


Mirrors contain broken thunderbird package (Fedora 19/i686). Koji builds are okay. See https://bugzilla.redhat.com/show_bug.cgi?id=1093927#c12

I have removed the signed copy from /mnt/koji and told koji to resign it http://kojipkgs.fedoraproject.org/packages/thunderbird/24.5.0/1.fc19/data/signed/fb4b18e6/i686/ has the new copy that is right, will be fixed with todays push

Should mash or createrepo (and/or yum) have detected this better?

I filed https://bugzilla.redhat.com/show_bug.cgi?id=1094846 for yum, but probably still should have a check in mash/createrepo/?

likely createrepo should bail if the rpm is corrupt. things are right on the master mirrornow

Login to comment on this ticket.

Metadata