Bug 17996

Summary:	mageiasync needs to deal with SHA512 checksums
Product:	Mageia	Reporter:	papoteur <yvesbrungard>
Component:	RPM Packages	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Normal	CC:	andrewsfarm, davidwhodgins, geiger.david68210, sysadmin-bugs, tarazed25
Version:	5	Keywords:	validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA5-64-OK MGA5-32-OK advisory
Source RPM:	mageiasync	CVE:
Status comment:

Description papoteur 2016-03-14 18:28:59 CET

A new version add the check of SHA512 sums instead of SHA1.
0.2.1 version is pushed.

David GEIGER 2016-03-14 20:34:49 CET

CC: (none) => geiger.david68210
Assignee: bugsquad => geiger.david68210

Comment 1 David GEIGER 2016-03-15 08:35:55 CET

Assigning to QA,


Advisory:
=============================

mageiasync needs to deal with SHA512 checksums, so this new
release adds the check of SHA512 sums instead of SHA1.


More info:

Now mageiasync replaces python-mageiasync, this is the same package, we have just changed the name.


Packages in 5/core/updates_testing:
========================
mageiasync-0.2.1-1.mga5.noarch.rpm

Source RPM: 
========================
mageiasync-0.2.1-1.mga5.src.rpm

Assignee: geiger.david68210 => qa-bugs

Comment 2 Len Lawrence 2016-03-15 22:08:17 CET

Tested this on a 64-bit system.  Ran it on the Classic 64-bit DVD iso, which took a good two hours.  md5 and sha512 checksums returned OK.

Any need to run this on 32-bit seeing as it is a noarch package?  I do not have the infrastructure for i586.

CC: (none) => tarazed25

Len Lawrence 2016-03-15 22:08:39 CET

Whiteboard: (none) => MGA5-64-OK

Comment 3 papoteur 2016-03-15 22:25:07 CET

Thanks Len for testing,
I'm not in QA team, but I confirm that my modifications are only in Python code.
What can be different between arch are modules such hashlib. It was already used, but not the sha512 function.

Comment 4 Len Lawrence 2016-03-15 23:57:44 CET

Thanks papoteur; so it is a marginal case.  I shall not validate this then, to give someone else the chance to test it on i586.

Dave Hodgins 2016-03-18 01:07:03 CET

Keywords: (none) => validated_update
Whiteboard: MGA5-64-OK => MGA5-64-OK MGA5-32-OK advisory
CC: (none) => davidwhodgins, sysadmin-bugs

Comment 5 Thomas Andrews 2016-03-19 00:44:44 CET

Tested this on a 32-bit system, with the 4.4.6 kernel update candidate installed. 

Synced both Classical Mageia 6 DVD isos.

md5 and sha512 checksums reported as OK.

CC: (none) => andrewsfarm

Comment 6 Mageia Robot 2016-03-19 14:11:10 CET

An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGAA-2016-0047.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED