Bug 20580 - non matching MD5 checksum for Mageia-5.1-Boot-nonfree-x86_64-CD.iso on web page 74e1e97aaf06f18a7457ae713be3ae7a
Summary: non matching MD5 checksum for Mageia-5.1-Boot-nonfree-x86_64-CD.iso on web pa...
Status: RESOLVED FIXED
Alias: None
Product: Websites
Classification: Unclassified
Component: www.mageia.org (show other bugs)
Version: trunk
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Atelier Team
QA Contact:
URL: https://www.mageia.org/en/downloads/g...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-03-27 02:10 CEST by Paul Blackburn
Modified: 2017-03-27 21:49 CEST (History)
2 users (show)

See Also:
Source RPM:
CVE:
Status comment:


Attachments

Description Paul Blackburn 2017-03-27 02:10:25 CEST
Description of problem:

The MD5 checksum shown for the "nonfree" network install iso image "Mageia-5.1-Boot-nonfree-x86_64-CD.iso" is incorrectly shown as 74e1e97aaf06f18a7457ae713be3ae7a on page: https://www.mageia.org/en/downloads/get/?q=Mageia-5.1-Boot-nonfree-x86_64-CD.iso.

The MD5 checksum I see after download of "Mageia-5.1-Boot-nonfree-x86_64-CD.iso"is: 182184999507cdcbca775faed8f9d913

Note that the MD5checksum of "free" network install iso image "Mageia-5.1-Boot-x86_64-CD.iso" is 74e1e97aaf06f18a7457ae713be3ae7a
(ref: https://www.mageia.org/en/downloads/get/?q=Mageia-5.1-Boot-x86_64-CD.iso )


It would appear that an error has been made by putting the same MD5 checksum 74e1e97aaf06f18a7457ae713be3ae7a on both the free and non-free versions of the network install iso files.

$ ls -l boot-nonfree.iso boot.iso
-rw-r--r-- 1 mpb mpb 40894464 Mar 27 00:42 boot.iso
-rw-r--r-- 1 mpb mpb 60817408 Mar 27 00:27 boot-nonfree.iso

As these files are of different length they should not be the same MD5 checksum

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. Open: https://www.mageia.org/en/downloads/get/?q=Mageia-5.1-Boot-nonfree-x86_64-CD.iso
2. Open: https://www.mageia.org/en/downloads/get/?q=Mageia-5.1-Boot-x86_64-CD.iso
3. Notice the MD5 checksums for the free and nonfree ISOs are the same: 74e1e97aaf06f18a7457ae713be3ae7a


Here are screenshots I made of each of these:

1. Nonfree  https://i.imgur.com/uPhpLci.png
2. Free  https://i.imgur.com/AUfEM7s.png
Rémi Verschelde 2017-03-27 08:02:23 CEST

CC: (none) => manuel.mageia

Comment 1 Filip Komar 2017-03-27 09:23:04 CEST
Confirmation of error:
Links with debug enable to switch off automatic DL js.
https://www.mageia.org/en/downloads/get/?q=Mageia-5.1-Boot-nonfree-x86_64-CD.iso&d=1
https://www.mageia.org/en/downloads/get/?q=Mageia-5.1-Boot-x86_64-CD.iso&d=1

This md5 in .en/downloads/get/definitions.ini is wrong as it should be the same as one the mirrors:
./mageia/distrib/5/i586/install/images/MD5SUM
ace383263a563d3fc37d23df442db8a8  boot.iso

The correct ones:
./mageia/distrib/5/x86_64/install/images/MD5SUM
74e1e97aaf06f18a7457ae713be3ae7a  boot.iso

./mageia/distrib/5/i586/install/images/MD5SUM-nonfree
3851d529a445191cde02c9de683faf1d  boot-nonfree.iso

./mageia/distrib/5/x86_64/install/images/MD5SUM-nonfree
182184999507cdcbca775faed8f9d913  boot-nonfree.iso

Fix:
So the md5 in following line needs to be changed to 182184999507cdcbca775faed8f9d913:
http://gitweb.mageia.org/web/www/tree/en/downloads/get/definitions.ini#n1013

CC: (none) => filip.komar

Comment 2 Mageia Robot 2017-03-27 19:54:22 CEST
commit e9736225babcda3013f125444479792941cddf46
Author: Manuel Hiebel <leuhmanu@...>
Date:   Mon Mar 27 19:53:18 2017 +0200

    Fix MD5 checksum for Mageia-5.1-Boot-nonfree-x86_64-CD (mga#20580)
---
 Commit Link:
   http://gitweb.mageia.org/web/www/commit/?id=e9736225babcda3013f125444479792941cddf46
Comment 3 Manuel Hiebel 2017-03-27 19:55:35 CEST
Thanks, fixed.

@filip, btw maybe we can remove definitions from mga4 and mga5 as we don't provide them on website ?
Comment 4 Filip Komar 2017-03-27 21:49:04 CEST
(In reply to Manuel Hiebel from comment #3)
> Thanks, fixed.
> 
> @filip, btw maybe we can remove definitions from mga4 and mga5 as we don't
> provide them on website ?

Thanks Manuel. Closing for you ;).

Removing nonexisting ISO files definitions sounds reasonable to me.

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.