Page 1 of 2 12 LastLast
Results 1 to 10 of 19

Thread: mplayer and gxine packman security warning.

  1. #1
    Join Date
    Jan 2009
    Location
    Taft, Republic of California. UTC -8
    Posts
    1,474

    Default mplayer and gxine packman security warning.

    I was updating the files I have from packman on my test box and got security warning on mplayer and gixine. I switched mirrors and got the same checksum errors on a totally different mirror except I was not re-offered mplayer once I refused it the first time.


    What to do?
    Tumbleweed

  2. #2
    Join Date
    Jun 2008
    Location
    The English Lake District. UK - GMT/BST
    Posts
    36,729
    Blog Entries
    20

    Default Re: mplayer and gxine packman security warning.

    This is a know issue ATM, that I think is being addressed.
    Leap 15.1_KDE
    My Articles Was I any help? If yes: Click the star below

  3. #3
    Join Date
    Jun 2008
    Location
    Berlin
    Posts
    2,061

    Default Re: mplayer and gxine packman security warning.

    Actually it should be working again... either way, more info can be found in →this thread.

  4. #4
    Join Date
    Jan 2009
    Location
    Taft, Republic of California. UTC -8
    Posts
    1,474

    Default Re: mplayer and gxine packman security warning.

    Well I got no warnings yesterday whilst updating this machine. I think this may be the same "issue" what ever that may be. This would not be the first time some misanthrope tried to poison a Linux software repository if that is the case. Changing the mirror proved that "something" was wrong and I went no further.

    I always get NOKEY errors from packman files. I have downloaded the packman key rpm and installed it.
    Tumbleweed

  5. #5
    Join Date
    Jun 2008
    Location
    Berlin
    Posts
    2,061

    Default Re: mplayer and gxine packman security warning.

    This would not be the first time some misanthrope tried to poison a Linux software repository if that is the case.
    Whoops? Could you provide any info on that? I am not sure I ever heard of that (at least I never heard of a successful attack).

    I always get NOKEY errors from packman files. I have downloaded the packman key rpm and installed it.
    I suppose you have not imported the rpm key when including Packman in your list of repositories (the one that zypper / YaST is asking to import).

    So... does the digest error still appear? Which mirror are you using?

  6. #6
    Join Date
    Jan 2009
    Location
    Taft, Republic of California. UTC -8
    Posts
    1,474

    Default Re: mplayer and gxine packman security warning.

    It appears my Packman keys are expired according to YAST. I just recently go them however

    Key: 45A1D0671ABD1AFB
    Name: PackMan Project (signing key) <packman@links2linux.de>
    Finger Print: F8875B880D518B6B8C530D1345A1D0671ABD1AFB
    Created: 09/21/2008
    Expires: 09/21/2010 (The key is expired.)
    Tumbleweed

  7. #7
    Join Date
    Jun 2008
    Location
    Berlin
    Posts
    2,061

    Default Re: mplayer and gxine packman security warning.

    So import a fresh key (again: the one YaST / zypper is asking to import).

  8. #8
    Join Date
    Jun 2008
    Location
    The English Lake District. UK - GMT/BST
    Posts
    36,729
    Blog Entries
    20

    Default Re: mplayer and gxine packman security warning.

    No problem for me

    Only I did get some messed up dependencies - usual though! _64 packages missing, they arrive eventually. But it throws a complete wobbly and tries to suggest a architecture change that may confuse some!
    Leap 15.1_KDE
    My Articles Was I any help? If yes: Click the star below

  9. #9
    Join Date
    Jan 2009
    Location
    Taft, Republic of California. UTC -8
    Posts
    1,474

    Default Re: mplayer and gxine packman security warning.

    Well pooh. I deleted the packman key in the YAST repositorys I do not understand the facility to add it back. Even deleting the repository and the repository back doesn't re-import the key it did segfault the repository manger though.
    Tumbleweed

  10. #10
    Join Date
    Jun 2008
    Location
    Berlin
    Posts
    2,061

    Default Re: mplayer and gxine packman security warning.

    Remove Packman and then try to reactivate Packman via console, it should ask to confirm importing the key then.

    Code:
    zypper ar -f http://ftp.uni-erlangen.de/pub/mirrors/packman/suse/11.3/ Packman
    Instead of the Erlangen mirror you may add your preferred mirror of course (again: which one do you use? I ask because there are PM mirrors which are outdated / do not sync properly).

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •