[ATrpms-users] checksum issues

[Axel Thimm]

On Sun, May 28, 2006 at 10:09:58AM -0700, Brett Hollon wrote:
> [Lots of previous discussion cut]
> 
> Axel,
> 
> If the checksums don't match, is it possible that repository has been
> hacked, and (some of) the packages are trojans?

No, it is just sloppy packagers at Red Hat that silently resigned the
packages after having sent out the update announcements.

But your concerns are justified and I hope s/o raises them at Red
Hat, too. Currently no updates/errata from a couple of weeks ago
matches with what the upstream repos really ship.
-- 
Axel.Thimm at ATrpms.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.atrpms.net/pipermail/atrpms-users/attachments/20060528/da1e03b3/attachment.bin