On 2016-05-04 19:45, Pat Riehecky wrote:
> 
> 
> On 05/04/2016 12:39 PM, olli hauer wrote:
>> On 2016-05-04 15:31, Pat Riehecky wrote:
>>> Synopsis:          Moderate: kernel security, bug fix, and enhancement
>>> Advisory ID:       SLSA-2016:0715-1
>>> Issue Date:        2016-05-04
>>> CVE Numbers:       CVE-2015-5157
>>>                     CVE-2015-8767
>>> -- 
>>>
>> ...
>>
>> Hi Pat / SL Team,
>>
>> don't know if it is a local issue on my site, but after the last rsync of the 6rolling, 6x and 6.7 repo I get again a checksum mismatch.
>>
>> Comparing the sha256 values from $repo/x86_64/updates/security/repodata/repomd.xml with the calculated sha256 in the directory does not match any of the files.
>>
>> In case it is useful as additional info, I've synced directly from rsync.scientificlinux.org (sldist.fnal.gov) IPv4: 131.225.105.11 some minutes ago.
>>
>> Perhaps someone can do a manual cross check?
>>
> 
> The files on the server seem to match what is expected.  Can I have you try a yum clean all?
> 
> Pat
> 
> linux/scientific/6.7/x86_64/updates/security/repodata
> [riehecky@testify repodata]$ sha256sum *
> 28ae1141d5fab86d48ec456fb9766d875050105cd77a5679a1883181d1c1b518 filelists.sqlite.bz2
> 04994a859d615f7cc1d5cf8027b2417412a29b739941aa6c9136a8877741fa9c filelists.xml.gz
> 7973023955f2cc583c25f6ed59c22a215ed19151f903c6eea3cb0bacdc736cf9 other.sqlite.bz2
> ec84e4610ee81c3387bc9cda4217cec520fa3248861e3d2efc80a22e64da6be3 other.xml.gz
> 2d3ee225327745cb43e9874c2d5fcb58411c178e9654be1619e6cab4ad1056f1 primary.sqlite.bz2
> 2528e5f97add7874d159ef687bd4ff9e7f256381b022c692b37c55c33d3aecd7 primary.xml.gz
> abc1c989aa3ae37f47b3c39a0ecb8dbc19becb06f1bbb0e1fa31f8a12563e061 repomd.xml
> de6609b12d04d98fa4c9c3d6801dac80d46c19b00cf1dbb03935d2e4eaeb915d updateinfo.xml
> d574666081cc0e3275c4bd6d6dca49f95751cad3b6512ec5b4465aac9a7599a2 updateinfo.xml.bz2
> [riehecky@testify repodata]$ cat repomd.xml
...


Thanks for your quick response !

Hm, strange all except the checksum for repomd.xml where matching, I've move the file out of the repodata folder, done a resync three or four times ...
Not I got a different one that matches the checksums.

Comparing both files they have a small time difference recorded.

$ diff -u repomd.xml.old repomd.xml | grep timestamp
-  <timestamp>1462368210</timestamp>
+  <timestamp>1462368259</timestamp>
-  <timestamp>1462369635.09</timestamp>
+  <timestamp>1462369638.19</timestamp>
-  <timestamp>1462368209</timestamp>
+  <timestamp>1462368259</timestamp>
-  <timestamp>1462368210</timestamp>
+  <timestamp>1462368259</timestamp>
-  <timestamp>1462368277</timestamp>
+  <timestamp>1462368299</timestamp>
-  <timestamp>1462368264</timestamp>
+  <timestamp>1462368299</timestamp>
-  <timestamp>1462368264</timestamp>
+  <timestamp>1462368299</timestamp>

Maybe that's the same issue users reported some weeks ago on the list ?

In case you are interested in both files, I can send you a copy

-- 

olli