Re: [Security-Discuss] Updated Xfree86/Xorg packages

On 6-May-05, at 7:34 PM, Chris wrote:

>>   
>> _____________________________________________________________________ 
>> __
>>
>>                 Mandriva Linux Security Update Advisory
>>   
>> _____________________________________________________________________ 
>> __
>>
>>  Package name:           XFree86
>>  Advisory ID:            MDKSA-2005:081
>>  Date:                   May 5th, 2005
>>
>>  Affected versions:    10.0, 10.1, 10.2, Corporate 3.0,
>>                        Corporate Server 2.1
>>   
>> _____________________________________________________________________ 
>> _
>>
>
> When trying to update Mandriva 10.1 I get the following errors:
>
> The following packages have bad signatures:
> xorg-x11-75dpi-fonts-6.7.0-4.3.101mdk.i586.rpm.  Missing signature  
> (couldn't
> open file) xorg-x11-server-6.7.0-4.3.101mdk.i586.rpm. Missing  
> signature
> (couldn't open file) xorg-x11-xfs-6.7.0-4.3.101mdk.i586.rpm. Missing
> signature (couldn't open file) xorg-x11- 
> Xvfb-6.7.0-4.3.101mdk.i586.rpm.
> Missing signature (couldn't open file)
>
> Should I assume its safe anyway to run the update and that somehow the
> signatures got left out?

No, I wouldn't assume that at all.  I'd suspect that the files are  
incomplete or damaged.  Clean out /var/cache/urpmi/rpms and try it  
again.  I know they are properly signed:

[qateam@mercury 10.1]$ rpm -K RPMS/xorg-x11-*
RPMS/xorg-x11-100dpi-fonts-6.7.0-4.3.101mdk.i586.rpm: (sha1) dsa sha1  
md5 gpg OK
RPMS/xorg-x11-6.7.0-4.3.101mdk.i586.rpm: (sha1) dsa sha1 md5 gpg OK
RPMS/xorg-x11-75dpi-fonts-6.7.0-4.3.101mdk.i586.rpm: (sha1) dsa sha1  
md5 gpg OK
RPMS/xorg-x11-Xnest-6.7.0-4.3.101mdk.i586.rpm: (sha1) dsa sha1 md5  
gpg OK
RPMS/xorg-x11-Xvfb-6.7.0-4.3.101mdk.i586.rpm: (sha1) dsa sha1 md5 gpg OK
RPMS/xorg-x11-cyrillic-fonts-6.7.0-4.3.101mdk.i586.rpm: (sha1) dsa  
sha1 md5 gpg OK
RPMS/xorg-x11-doc-6.7.0-4.3.101mdk.i586.rpm: (sha1) dsa sha1 md5 gpg OK
RPMS/xorg-x11-glide-module-6.7.0-4.3.101mdk.i586.rpm: (sha1) dsa sha1  
md5 gpg OK
RPMS/xorg-x11-server-6.7.0-4.3.101mdk.i586.rpm: (sha1) dsa sha1 md5  
gpg OK
RPMS/xorg-x11-xfs-6.7.0-4.3.101mdk.i586.rpm: (sha1) dsa sha1 md5 gpg OK

You can also check the sizes of the files as well; it sounds to me  
like the files couldn't be opened because they're not all there:

[qateam@mercury 10.1]$ ls -l RPMS/xorg-x11-*
-rw-r--r--  1 qateam qateam  8433037 Apr 29 06:57 RPMS/xorg- 
x11-100dpi-fonts-6.7.0-4.3.101mdk.i586.rpm
-rw-r--r--  1 qateam qateam 12920764 Apr 29 06:57 RPMS/xorg- 
x11-6.7.0-4.3.101mdk.i586.rpm
-rw-r--r--  1 qateam qateam  7328502 Apr 29 06:57 RPMS/xorg-x11-75dpi- 
fonts-6.7.0-4.3.101mdk.i586.rpm
-rw-r--r--  1 qateam qateam   755477 Apr 29 06:57 RPMS/xorg-x11- 
cyrillic-fonts-6.7.0-4.3.101mdk.i586.rpm
-rw-r--r--  1 qateam qateam  4439280 Apr 29 06:57 RPMS/xorg-x11- 
doc-6.7.0-4.3.101mdk.i586.rpm
-rw-r--r--  1 qateam qateam   564536 Apr 29 06:57 RPMS/xorg-x11-glide- 
module-6.7.0-4.3.101mdk.i586.rpm
-rw-r--r--  1 qateam qateam  9488616 Apr 29 06:57 RPMS/xorg-x11- 
server-6.7.0-4.3.101mdk.i586.rpm
-rw-r--r--  1 qateam qateam   612209 Apr 29 06:57 RPMS/xorg-x11- 
xfs-6.7.0-4.3.101mdk.i586.rpm
-rw-r--r--  1 qateam qateam  1349069 Apr 29 06:57 RPMS/xorg-x11- 
Xnest-6.7.0-4.3.101mdk.i586.rpm
-rw-r--r--  1 qateam qateam  1491434 Apr 29 06:57 RPMS/xorg-x11- 
Xvfb-6.7.0-4.3.101mdk.i586.rpm

-- 
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C  A2BC 2EBC 5E32 FEE3 0AD4}