Results 1 to 3 of 3

Thread: Unsigned RedHat 7.2 RPMs

  1. #1
    Aaron_Adams
    Guest

    Unsigned RedHat 7.2 RPMs

    Did you hear about this JimH?

    I heard that RH forgot to sign a bunch of their 7.2 packages, and people are worried that untrusted sources may start distributing them with added "features" that could cause a tad bit of havoc. Have they done anything about it yet? Re-released them signed or anything?

    (Sorta older news maybe, but it just came to my mind as something that was mentioned on a mailinglist a bit ago)

  2. #2
    JimH
    Guest

    Re: Unsigned RedHat 7.2 RPMs


    Did you hear about this JimH?

    I heard that RH forgot to sign a bunch of their 7.2 packages, and people are worried that untrusted sources may start distributing them with added "features" that could cause a tad bit of havoc. Have they done anything about it yet? Re-released them signed or anything?

    (Sorta older news maybe, but it just came to my mind as something that was mentioned on a mailinglist a bit ago)
    Yes, silly mistake by RedHat. It was only 2 rpm's. They were rpmdb and redhat-release. They have released updated rpm's for these. It is really a non-issue. If someone where to change the rpm and insert some kind a malicious code, it would change the md5sums on the re-packaged ISO images. It has been blown out of proportion by some people.

    Jim H

  3. #3
    Aaron_Adams
    Guest

    Re: Unsigned RedHat 7.2 RPMs

    Oh. I thought that they didn't do MD5 sums on them either. Wierd. Ah well, glad its small. People tend to take things way out of proportion don't they.

    From the story I heard, it was a lot more serious then it is. Thats why I got ask the vets lol.
    Anyways thx for the info.


    Aaron

Similar Threads

  1. rpms
    By qin in forum Linux - General Topics
    Replies: 4
    Last Post: 04-03-2005, 10:51 PM
  2. Redhat AS 2.1 and src rpms
    By Outlaw in forum Linux - General Topics
    Replies: 2
    Last Post: 12-22-2003, 11:39 PM
  3. Redhat 8.0: Should I install only rpms or tar files or both?
    By JockVSJock in forum Linux - General Topics
    Replies: 5
    Last Post: 02-10-2003, 04:57 PM
  4. Rpms...
    By SYSDmg in forum Linux - General Topics
    Replies: 3
    Last Post: 10-04-2002, 03:06 AM
  5. rpms
    By agar in forum Linux - Software, Applications & Programming
    Replies: 3
    Last Post: 12-29-2001, 11:56 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •