Public bug reported:
Trying to install the package virtualbox-ext-pack 5.2.10-3 produces the
following error message:
Hash mismatch Oracle_VM_VirtualBox_Extension_Pack-5.2.10.vbox-extpack:
expected
8c31bc1d0337e6668e0d9140defc6deaf265087f855783dd09b873a064a70703, or
wrong accept-license key
I manually downloaded Oracle_VM_VirtualBox_Extension_Pack-5.2.10.vbox-extpack
to find verify it has the same sha256 sum:
5eef217dbe0a8e8caf383ea8db83344517af0f9093041b5345c8468a427b327b as the file
downloaded by the installer script.
Unlike the installer script I chose to use https for the download.
As the certificate seemed to be valid, I am more or less sure, I at least got
the version the legit owner of the CN www.virtualbox.org seems to offer.
Investigating the problem further I found out, there seems to have been
an update of the extension pack from version 5.2.10-122088 to
5.2.10-122406 just yesterday.
Oracle_VM_VirtualBox_Extension_Pack-5.2.10-122088.vbox-extpack 16-Apr-2018
11:18 19M
Oracle_VM_VirtualBox_Extension_Pack-5.2.10-122406.vbox-extpack 27-Apr-2018
15:31 19M
Downloading the older 122088 release I was able to verify this one produces the
sha256 checksum named above.
Most probably the "file" named
Oracle_VM_VirtualBox_Extension_Pack-5.2.10.vbox-extpack is just a symlink that
Oracle changed from the older 122088 version to point the newer 122406 version.
Which would mean the variable hash on line 5 of the postinst script
would have to be updated to the checksum of the newer version as well.
** Affects: virtualbox (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1767533
Title:
hash mismatch
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/virtualbox/+bug/1767533/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
