[vbox-dev] 5.2.34 hash failures

[Ladar Levison]

It seems that several of the files in the 5.2.34 download directory
don't match the provided SHA-256 hash. Only the RPM/DMG files appear to
be invalid.

I found this issue because yum failed to update itself properly via the
el7 repo. It seems at a minimum, the el7 repo also has an invalid copy
of the 5.2.34 rpm. I say invalid because the hash inside the primary.xml
file doesn't match the rpm hash. I can't speak to whether the rpm is
actually valid, and/or whether the signature is valid. See below.

--

L~

Oracle_VM_VirtualBox_Extension_Pack-5.2.34-133893.vbox-extpack: OK
Oracle_VM_VirtualBox_Extension_Pack-5.2.34.vbox-extpack: OK
SDKRef.pdf: OK
UserManual.pdf: OK
VBoxGuestAdditions_5.2.34.iso: OK
*VirtualBox-5.2-5.2.34_133893_el6-1.i686.rpm: FAILED**
**VirtualBox-5.2-5.2.34_133893_el6-1.x86_64.rpm: FAILED**
**VirtualBox-5.2-5.2.34_133893_el7-1.x86_64.rpm: FAILED**
**VirtualBox-5.2-5.2.34_133893_el8-1.x86_64.rpm: FAILED**
**VirtualBox-5.2-5.2.34_133893_fedora26-1.i686.rpm: FAILED**
**VirtualBox-5.2-5.2.34_133893_fedora26-1.x86_64.rpm: FAILED**
**VirtualBox-5.2-5.2.34_133893_fedora29-1.x86_64.rpm: FAILED**
**VirtualBox-5.2-5.2.34_133893_openSUSE132-1.i586.rpm: FAILED**
**VirtualBox-5.2-5.2.34_133893_openSUSE132-1.x86_64.rpm: FAILED**
**VirtualBox-5.2-5.2.34_133893_openSUSE150-1.x86_64.rpm: FAILED*
VirtualBox-5.2.34-133893-Linux_amd64.run: OK
VirtualBox-5.2.34-133893-Linux_x86.run: OK
*VirtualBox-5.2.34-133893-OSX.dmg: FAILED*
VirtualBox-5.2.34-133893-SunOS.tar.gz: OK
VirtualBox-5.2.34-133893-Win.exe: OK
VirtualBox-5.2.34.tar.bz2: OK
VirtualBoxSDK-5.2.34-133893.zip: OK
virtualbox-5.2_5.2.34-133893~Debian~jessie_amd64.deb: OK
virtualbox-5.2_5.2.34-133893~Debian~jessie_i386.deb: OK
virtualbox-5.2_5.2.34-133893~Debian~stretch_amd64.deb: OK
virtualbox-5.2_5.2.34-133893~Debian~stretch_i386.deb: OK
virtualbox-5.2_5.2.34-133893~Ubuntu~bionic_amd64.deb: OK
virtualbox-5.2_5.2.34-133893~Ubuntu~trusty_amd64.deb: OK
virtualbox-5.2_5.2.34-133893~Ubuntu~trusty_i386.deb: OK
virtualbox-5.2_5.2.34-133893~Ubuntu~xenial_amd64.deb: OK
virtualbox-5.2_5.2.34-133893~Ubuntu~xenial_i386.deb: OK

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.virtualbox.org/pipermail/vbox-dev/attachments/20191016/5a954f09/attachment.html>