> On 17 Oct 2023, at 21:16, Patrick Dupre via users
<users(a)lists.fedoraproject.org> wrote:
>
> Hello,
>
> If I make a rpm -qa, I got
>
> xconsole-1.0.7-2.fc34.x86_64
> nautilus-sendto-3.8.6-8.fc32.x86_64
These are very old packages that are, I think, signed by keys that are
no longer supported because they are not secure.
I do not think so, I removed nautilus-sendto-3.8.6-8.fc32.x86_64
and same thing appears.
On one machine
rpm -qa xpr
xpr-1.0.5-2.fc34.x86_64
One the other machine, the same command
xpr-1.0.5-2.fc34.x86_64
--More--error: rpmdbNextIterator: skipping h# 132
Header RSA signature: BAD (header tag 268: invalid OpenPGP signature: Parsing an OpenPGP
packet:
Failed to parse Signature Packet
because: Signature appears to be created by a non-conformant OpenPGP implementation,
see <
https://github.com/rpm-software-management/rpm/issues/2351>.
because: Malformed MPI: leading bit is not set: expected bit 8 to be set in 101000
(28))
Header SHA1 digest: OK
> > error: rpmdbNextIterator: skipping h# 134
> > Header RSA signature: BAD (header tag 268: invalid OpenPGP signature: Parsing an
OpenPGP packet:
> > Failed to parse Signature Packet
> > because: Signature appears to be created by a non-conformant OpenPGP
implementation, see <
https://github.com/rpm-software-management/rpm/issues/2351>.
> > because: Malformed MPI: leading bit is not set: expected bit 8 to be set in
1111100 (7c))
> > Header SHA1 digest: OK
> > error: rpmdbNextIterator: skipping h# 137
> > Header RSA signature: BAD (header tag 268: invalid OpenPGP signature: Parsing an
OpenPGP packet:
> > Failed to parse Signature Packet
> > because: Signature appears to be created by a non-conformant OpenPGP
implementation, see <
https://github.com/rpm-software-management/rpm/issues/2351>.
> > because: Malformed MPI: leading bit is not set: expected bit 8 to be set in
10011 (13))
> > Header SHA1 digest: OK
> > error: rpmdbNextIterator: skipping h# 138
> > Header RSA signature: BAD (header tag 268: invalid OpenPGP signature: Parsing an
OpenPGP packet:
> > Failed to parse Signature Packet
> > because: Signature appears to be created by a non-conformant OpenPGP
implementation, see <
https://github.com/rpm-software-management/rpm/issues/2351>.
> > because: Malformed MPI: leading bit is not set: expected bit 8 to be set in
101101 (2d))
> > Header SHA1 digest: OK
> > error: rpmdbNextIterator: skipping h# 140
> > Header RSA signature: BAD (header tag 268: invalid OpenPGP signature: Parsing an
OpenPGP packet:
> > Failed to parse Signature Packet
> >
> >
> >
> > Can I void these errors?
>
> Yes remove the very old packages. Can you install f38 versions of them?
>
> Barry
>
> > ===========================================================================
> > Patrick DUPRÉ | | email: pdupre(a)gmx.com
> > ===========================================================================
> > _______________________________________________
> > users mailing list -- users(a)lists.fedoraproject.org
> > To unsubscribe send an email to users-leave(a)lists.fedoraproject.org
> > Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
> > Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
>
>