I was running Yast Online Update (YOU) for SUSE 9.2 yesterday after installing a bunch of stuff after a fresh install in a machine. For about half of the RPM's I got a message about the MD5 SUMS not matching. But, upon completion, it looks like everything installed.

Can someone explain to me what this message means and any reponse I should take.

Regards,

John

an md5 sum is used to see if the files you download were the same as the originals.
ie has a black hat trojan'd them!!! (or more likely the download has corrupted slightyly).

If I used one of the pre-assigned (by SUSE) sites listed in YOU to download from, everything should be ok though, right?

Thats the whole point of the MD5 sum - its alerting you that something *may* be amiss.

The unfortunate truth is nothing is 100% hacker proof so even if you download it from SuSe.de there is a chance (however small) that the server may have been hacked.

if you changed a single bit in say a 50MB file the MD5 sum will be different.
You may have had a single(or more) corrupt bit in your download.
But a hacker might have backdoor'd the software. I can't tell you which it is


>>everything should be ok though, right?
Should be. But like I say a hacker may have 0wn3d it.
If you are paranoid when it comes to hackers un-install the updates and try again, otherwise just assume it was slightly corrupt.

btw
paranoid in this case is interchangeable with smart

I think I'll just select a different location and set the system up to download ALL updates all over again.

Thanks!

John