Bug 17996 - mageiasync needs to deal with SHA512 checksums
Summary: mageiasync needs to deal with SHA512 checksums
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 5
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL:
Whiteboard: MGA5-64-OK MGA5-32-OK advisory
Keywords: validated_update
Depends on:
Blocks:
 
Reported: 2016-03-14 18:28 CET by papoteur
Modified: 2016-03-19 14:11 CET (History)
5 users (show)

See Also:
Source RPM: mageiasync
CVE:
Status comment:


Attachments

Description papoteur 2016-03-14 18:28:59 CET
A new version add the check of SHA512 sums instead of SHA1.
0.2.1 version is pushed.
David GEIGER 2016-03-14 20:34:49 CET

CC: (none) => geiger.david68210
Assignee: bugsquad => geiger.david68210

Comment 1 David GEIGER 2016-03-15 08:35:55 CET
Assigning to QA,


Advisory:
=============================

mageiasync needs to deal with SHA512 checksums, so this new
release adds the check of SHA512 sums instead of SHA1.


More info:

Now mageiasync replaces python-mageiasync, this is the same package, we have just changed the name.


Packages in 5/core/updates_testing:
========================
mageiasync-0.2.1-1.mga5.noarch.rpm

Source RPM: 
========================
mageiasync-0.2.1-1.mga5.src.rpm

Assignee: geiger.david68210 => qa-bugs

Comment 2 Len Lawrence 2016-03-15 22:08:17 CET
Tested this on a 64-bit system.  Ran it on the Classic 64-bit DVD iso, which took a good two hours.  md5 and sha512 checksums returned OK.

Any need to run this on 32-bit seeing as it is a noarch package?  I do not have the infrastructure for i586.

CC: (none) => tarazed25

Len Lawrence 2016-03-15 22:08:39 CET

Whiteboard: (none) => MGA5-64-OK

Comment 3 papoteur 2016-03-15 22:25:07 CET
Thanks Len for testing,
I'm not in QA team, but I confirm that my modifications are only in Python code.
What can be different between arch are modules such hashlib. It was already used, but not the sha512 function.
Comment 4 Len Lawrence 2016-03-15 23:57:44 CET
Thanks papoteur; so it is a marginal case.  I shall not validate this then, to give someone else the chance to test it on i586.
Dave Hodgins 2016-03-18 01:07:03 CET

Keywords: (none) => validated_update
Whiteboard: MGA5-64-OK => MGA5-64-OK MGA5-32-OK advisory
CC: (none) => davidwhodgins, sysadmin-bugs

Comment 5 Thomas Andrews 2016-03-19 00:44:44 CET
Tested this on a 32-bit system, with the 4.4.6 kernel update candidate installed. 

Synced both Classical Mageia 6 DVD isos.

md5 and sha512 checksums reported as OK.

CC: (none) => andrewsfarm

Comment 6 Mageia Robot 2016-03-19 14:11:10 CET
An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGAA-2016-0047.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.