i am loading debuginfo packages and some stack trace clues are pointing to mhash-devel missing checksum data. the xml has: <checksum type="sha" pkgid="YES"></checksum>
could that be the issue? On 07/26/2011 08:31 AM, Joe Pruett wrote: > i have done some strace'ing and it is dieing while reading > /var/cache/yum/rpmforge/primary.xml.gz. i have externally tested that > file and can gunzip it just fine and xmllint doesn't find any issues > either, so it would appear to be the data itself. i'll do a bit more > poking to see if i can track down anything further. > > On 07/26/2011 08:20 AM, Dag Wieers wrote: >> On Tue, 26 Jul 2011, Yury V. Zaytsev wrote: >> >>> On Tue, 2011-07-26 at 16:59 +0200, Dag Wieers wrote: >>> >>>> Regardless someone should fill this as a potential security-problem with >>>> the yum maintainers. I think they should be very concerned :-/ >>> Maybe a good idea to keep a backup of the metadata that is causing this >>> issue? Otherwise I don't see how one would be able to reproduce it if >>> later on we manage to find a workaround for that. >> I always keep a copy of the past 15 days of metadata (and repository) >> because it could help us to revert to an older set when necessary. I also >> keep 2 copies of each previous month as well in an archive... >> > _______________________________________________ > users mailing list > [email protected] > http://lists.repoforge.org/mailman/listinfo/users > _______________________________________________ users mailing list [email protected] http://lists.repoforge.org/mailman/listinfo/users
