[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: kdelibs_3.0.5a.orig.tar.gz MD5Sum mismatch



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thursday 02 January 2003 16:40, albrecht.gebhardt@uni-klu.ac.at wrote:
> Failed to fetch
> http://download.at.kde.org/pub/kde/stable/latest/Debian/woody/source/kdelib
>s/kdelibs_3.0.5a.orig.tar.gz MD5Sum mismatch
> E: Failed to fetch some archives.
>
>
> I tried also download.us.kde.org : same error, also repeatedly after
> removing the tar file (which is extractable).
>
> Is this a serious error or should I just ignore it?

This error says the following: The file you downloaded does not match the 
signature of the original file that was mentioned in the file Release:

There are 2 possibilities:

a) Somebody tried to sneek in wrong sources
b) After the last source upload the Release file were not updated or got last 
updated and you got an old copy.(mirror troubles)

It is your job to find out if this is a big security issue or a minor.

Ciao, Matthias
- -- 
Matthias Wieser     email: developer@hiasl.net
Haiderhofweg 16   homepage: http://www.hiasl.net
A-8793 Trofaiach    Handy: 0699/11305112
AUSTRIA
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)

iD8DBQE+FYMqDFDAeZuVvzARAn5qAKCFQtn/Go9AyPGVq1ZDcshsCeFKQwCgl+4K
uJNbvlxO4KX1aB2PYjVjNuw=
=xddq
-----END PGP SIGNATURE-----



Reply to: