Bug 20580

Summary:	non matching MD5 checksum for Mageia-5.1-Boot-nonfree-x86_64-CD.iso on web page 74e1e97aaf06f18a7457ae713be3ae7a
Product:	Websites	Reporter:	Paul Blackburn <paul.blackburn>
Component:	www.mageia.org	Assignee:	Atelier Team <atelier-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Normal	CC:	filip.komar, manuel.mageia
Version:	trunk
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	https://www.mageia.org/en/downloads/get/?q=Mageia-5.1-Boot-nonfree-x86_64-CD.iso
Whiteboard:
Source RPM:		CVE:
Status comment:

Description Paul Blackburn 2017-03-27 02:10:25 CEST

Description of problem:

The MD5 checksum shown for the "nonfree" network install iso image "Mageia-5.1-Boot-nonfree-x86_64-CD.iso" is incorrectly shown as 74e1e97aaf06f18a7457ae713be3ae7a on page: https://www.mageia.org/en/downloads/get/?q=Mageia-5.1-Boot-nonfree-x86_64-CD.iso.

The MD5 checksum I see after download of "Mageia-5.1-Boot-nonfree-x86_64-CD.iso"is: 182184999507cdcbca775faed8f9d913

Note that the MD5checksum of "free" network install iso image "Mageia-5.1-Boot-x86_64-CD.iso" is 74e1e97aaf06f18a7457ae713be3ae7a
(ref: https://www.mageia.org/en/downloads/get/?q=Mageia-5.1-Boot-x86_64-CD.iso )


It would appear that an error has been made by putting the same MD5 checksum 74e1e97aaf06f18a7457ae713be3ae7a on both the free and non-free versions of the network install iso files.

$ ls -l boot-nonfree.iso boot.iso
-rw-r--r-- 1 mpb mpb 40894464 Mar 27 00:42 boot.iso
-rw-r--r-- 1 mpb mpb 60817408 Mar 27 00:27 boot-nonfree.iso

As these files are of different length they should not be the same MD5 checksum

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. Open: https://www.mageia.org/en/downloads/get/?q=Mageia-5.1-Boot-nonfree-x86_64-CD.iso
2. Open: https://www.mageia.org/en/downloads/get/?q=Mageia-5.1-Boot-x86_64-CD.iso
3. Notice the MD5 checksums for the free and nonfree ISOs are the same: 74e1e97aaf06f18a7457ae713be3ae7a


Here are screenshots I made of each of these:

1. Nonfree  https://i.imgur.com/uPhpLci.png
2. Free  https://i.imgur.com/AUfEM7s.png

Rémi Verschelde 2017-03-27 08:02:23 CEST

CC: (none) => manuel.mageia

Comment 1 Filip Komar 2017-03-27 09:23:04 CEST

Confirmation of error:
Links with debug enable to switch off automatic DL js.
https://www.mageia.org/en/downloads/get/?q=Mageia-5.1-Boot-nonfree-x86_64-CD.iso&d=1
https://www.mageia.org/en/downloads/get/?q=Mageia-5.1-Boot-x86_64-CD.iso&d=1

This md5 in .en/downloads/get/definitions.ini is wrong as it should be the same as one the mirrors:
./mageia/distrib/5/i586/install/images/MD5SUM
ace383263a563d3fc37d23df442db8a8  boot.iso

The correct ones:
./mageia/distrib/5/x86_64/install/images/MD5SUM
74e1e97aaf06f18a7457ae713be3ae7a  boot.iso

./mageia/distrib/5/i586/install/images/MD5SUM-nonfree
3851d529a445191cde02c9de683faf1d  boot-nonfree.iso

./mageia/distrib/5/x86_64/install/images/MD5SUM-nonfree
182184999507cdcbca775faed8f9d913  boot-nonfree.iso

Fix:
So the md5 in following line needs to be changed to 182184999507cdcbca775faed8f9d913:
http://gitweb.mageia.org/web/www/tree/en/downloads/get/definitions.ini#n1013

CC: (none) => filip.komar

Comment 2 Mageia Robot 2017-03-27 19:54:22 CEST

commit e9736225babcda3013f125444479792941cddf46
Author: Manuel Hiebel <leuhmanu@...>
Date:   Mon Mar 27 19:53:18 2017 +0200

    Fix MD5 checksum for Mageia-5.1-Boot-nonfree-x86_64-CD (mga#20580)
---
 Commit Link:
   http://gitweb.mageia.org/web/www/commit/?id=e9736225babcda3013f125444479792941cddf46

Comment 3 Manuel Hiebel 2017-03-27 19:55:35 CEST

Thanks, fixed.

@filip, btw maybe we can remove definitions from mga4 and mga5 as we don't provide them on website ?

Comment 4 Filip Komar 2017-03-27 21:49:04 CEST

(In reply to Manuel Hiebel from comment #3)
> Thanks, fixed.
> 
> @filip, btw maybe we can remove definitions from mga4 and mga5 as we don't
> provide them on website ?

Thanks Manuel. Closing for you ;).

Removing nonexisting ISO files definitions sounds reasonable to me.

Status: NEW => RESOLVED
Resolution: (none) => FIXED