So, earlier today I am going through my usual round of updates on Yast, when I get a message of this sort after the Packman repo is refreshed, referring to primary.xml.gz:
Wrong Digest
The expected checksum of (…) is (…), but the current checksum is (…).
This means that the file has been changed by accident or by an attacker
since the repository creator signed it. Using it is a big risk for the
integrity and security of your system.
I have never seen an error of this type. Was there something changed on the repo? Is it a problem on my system? Was there an attack that changed the repo’s data illegitimately? I am using this mirror.
i just now, opened YaST, selected Software Management, it
(automatically) refreshed the list here (including packman)–with no
errors…
then i closed that and opened Software Repositories, selected packman,
clicked Refresh > Refresh Selected (bottom right) and that too ran
without the error you reported…i was going to change my packman
address to the one you are using–to see if it will give the error, but
then i see it already is the same as yours…
so, i suggest you try again…maybe it was “line noise” or goblins or
bad voodoo…
if you get it again, please post because that should not happen…(and,
maybe someone else can better help you resolve the issue)…
Thanks for double-checking. I am quite paranoid when it comes to security risks, but since you haven’t seen anything strange and you are using the same mirror, for now I will assume that this was an arbitrary bad checksum on my system’s side
I just refreshed it now and I didn’t get any error this time.
