Actions
Bug #7947
closedsynced RPMs do not have their checksums verified
Difficulty:
Triaged:
Yes
Bugzilla link:
Pull request:
Description
Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1139896
During testing we ran into a situation where RPMs had been synchronized from the CDN, copied to disk and then published in a Content View with an RPM that was truncated and not fully complete.
Extraction of the RPM shows an incomplete file:
- rpm2cpio selinux-policy-targeted-3.7.19-231.el6.noarch.rpm | cpio -idmv
....
./usr/share/selinux/targeted/piranha.pp.bz2
cpio: ./usr/share/selinux/targeted/pkcsslotd.pp.bz2 not created: newer or same age version exists
./usr/share/selinux/targeted/pkcsslotd.pp.bz2
cpio: ./usr/share/selinux/targeted/plymouthd.pp.bz2 not created: newer or same age version exists
cpio: premature end of file
The metadata containing filesizes and checksums for obvious reasons, does not match the above file since it is corrupt for whatever reason.
Actions