[CentOS-mirror] Broken package database

[Stephan Schaefer]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Release: CentOS 5.2
Arch: x86_64
File: http://mirror.centos.org/centos/5/os/x86_64/repodata/primary.xml.gz

Hi,

mirror.centos.org has a broken package database, there are some
packages with wrong SHA1 Sums, therefore yum
throws the following error message: "[Errno -1] Package does not match
intended download"

i.e.:
primary.xml.gz: (logwatch - BROKEN)
<package type="rpm"><name>logwatch</name><arch>noarch</arch><version
epoch="0" ver="7.3" rel="6.el5"/><checksum type="sha"
pkgid="YES">16f342831a0cde43e298044fc9aef309d57d8d4f</checksum>

sschaefer at grisu:/tmp/$ sha1sum logwatch-7.3-6.el5.noarch.rpm
873ff8db6bd17c6f5c6c1b0beb1252516f10ddaf  logwatch-7.3-6.el5.noarch.rpm


primary.xml.gz: (yum-updatesd - BROKEN)
<package
type="rpm"><name>yum-updatesd</name><arch>noarch</arch><version
epoch="1" ver="0.9" rel="2.el5"/><checksum type="sha"
pkgid="YES">3132f10ed5abecc516da3278163a6446f28c0397</checksum>

sschaefer at grisu:/tmp/$ sha1sum yum-updatesd-0.9-2.el5.noarch.rpm
ba888fc919d7f8941822961a549e78e8a0179945
yum-updatesd-0.9-2.el5.noarch.rpm

primary.xml.gz: (openssh-clients - OK)
<package
type="rpm"><name>openssh-clients</name><arch>x86_64</arch><version
epoch="0" ver="4.3p2" rel="26.el5"/><checksum type="sha"
pkgid="YES">8996196e44fa51014c15825e673dcaeb7a63f75b

sschaefer at grisu:/tmp/test$ sha1sum
openssh-clients-4.3p2-26.el5.x86_64.rpm
8996196e44fa51014c15825e673dcaeb7a63f75b
openssh-clients-4.3p2-26.el5.x86_64.rpm

- --
=================================================================

Stephan Schäfer
Systemadministration

Tel: +49 22 33 - 612 - 3402
Fax: +49 22 33 - 612 - 53402
E-Mail: s.schaefer at plusserver.de
GPG-Fingerprint: B1DC 9441 F80A E916 633A  A03C E8B5 C2B3 F414 7D3E

PlusServer AG
Daimlerstraße 9-11
50354 Hürth
Germany

HRB 58428 / Amtsgericht Köln, USt-ID DE216 740 823
Vorstand: Jochen Berger, Frank Gross, Jan Osthues, Thomas Strohe
Aufsichtsratsvorsitz: Claudius Schmalschläger

=================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIhZiR6LXCs/QUfT4RAvMCAKCzdVyyvm4i8wEnhmtgOpLN1f2+wQCgl5JP
cfQVOcunWmcnpAA57w3+BTM=
=vBuG
-----END PGP SIGNATURE-----