linux-kernel - Re: stable kernel checksumming fails

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Sun, 7 Mar 2021 16:48:09 +0100
From:   Greg KH <gregkh@...uxfoundation.org>
To:     Konstantin Ryabitsev <konstantin@...uxfoundation.org>
Cc:     Ronald Warsow <rwarsow@....de>, stable@...r.kernel.org,
        linux-kernel@...r.kernel.org
Subject: Re: stable kernel checksumming fails

On Sun, Mar 07, 2021 at 10:43:54AM -0500, Konstantin Ryabitsev wrote:
> On Sun, Mar 07, 2021 at 03:45:15PM +0100, Greg KH wrote:
> > > checksumming the downloaded kernel manually gives an "Okay" though.
> > > 
> > > 
> > > is this just me (on Fedora 33) ?
> > 
> > Fails for me on Arch:
> > 
> > Verifying checksum on linux-5.11.4.tar.xz
> > /usr/bin/sha256sum: /home/gregkh/Downloads/linux-tarball-verify.gZo313NCk.untrusted/sha256sums.txt: no properly formatted SHA256 checksum lines found
> > FAILED to verify the downloaded tarball checksum
> > 
> > 
> > Konstantin, anything change recently?
> 
> I think it's just cache invalidation problems. I've committed a tiny change to
> the script that always grabs that file from the origin servers instead of
> going via the CDN.
> 
> https://git.kernel.org/pub/scm/linux/kernel/git/mricon/korg-helpers.git/commit/?id=71e570c5f090b5740e323f98504bf38592785b49
> 
> This should sidestep the problem.
> 
> -K

Nice, fixed it for me, thanks!

Ronald, does it now work for you too?

greg k-h