–
Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890)
openSUSE Leap 42.1|GNOME 3.16.2|4.1.36-41-default
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below… Thanks!
You’re probably OK.
Your first error was because Apper was still running in the background. When Apper is running, it’s trying to update your system so is temporarily locking all other access to package management functions until it’s done.
The second error appears to only be because whoever compiled the package didn’t include a key for verifying the integrity and authenticity of the package contents. Yes, this opens op the possibility that someone can download the package, modify its contents (maybe insert malware?) and then upload or otherwise distribute the package with its new hidden payload. But, this is extremely unlikely especially if you downloaded from a trusted repository which restricts uploading (More than likely the Owner is the only one with that right).