Re: [Security-Discuss] Invalid signature on perl-URPM-1.03-2mdk.i586.rpm

On 17-Dec-04, at 12:11 PM, Rick Kunath wrote:

>> Please sign and redistribute the package.
> A bug report was filed earlier today and has been acknowledged by 
> Mandrake.

By someone who didn't bother to check it out.

> A search on http://qa.mandrakesoft.com/ will take you to relevant bug 
> reports.

Or you could have posted the actual url:

http://qa.mandrakesoft.com/show_bug.cgi?id=12715

> The above URL is the correct way to file Mandrake bugs. This newsgroup 
> is not an official Mandrake forum, and there is no guarantee that 
> appropriate individuals will see any posting made here.

It is an official Mandrake "forum", although it's not a newsgroup.  And 
there are appropriate individuals on this list.  In fact, if this 
hadn't been brought up on the list, I'm afraid I wouldn't have even 
found out about this.

> In this case, the bug filing has already been done.

Yes, and it's a bogus report.  There's nothing wrong with the file.  
Look at my comments on the report and you'll see that, unlike the 
poster and some other people, I went through and actually *checked* to 
see what the problem was.  And there was none.

-- 
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C  A2BC 2EBC 5E32 FEE3 0AD4}