Virtualbox 6.1.18 package has incorrect metadata (Package does not match intended download. )

[haster]

When trying to install the virtualbox 6.1.18 rpm package using yum on centos, the installation fails:

Downloading packages:
[91mhttp://download.virtualbox.org/virtualbox/rpm/el/7/x86_64/VirtualBox-6.1-6.1.18_142142_el7-1.x86_64.rpm: [Errno -1] Package does not match intended download. Suggestion: run yum --enablerepo=virtualbox clean metadata

The cause is incorrect metadata, specifically the hash does not match the package.

<package type="rpm">
  <name>VirtualBox-6.1</name>
  <arch>x86_64</arch>
  <version epoch="0" ver="6.1.18_142142_el7" rel="1"/>
  <checksum type="sha256" pkgid="YES">9adb0e02b6b43d589a59b0b6408f02edd558bb6d284b5adcd3f307ec06bc1c47</checksum>

user@machine:~/Downloads$ sha256sum VirtualBox-6.1-6.1.18_142142_el7-1.x86_64.rpm 
aaf59fb6cbfa9cc44a6f0b45bbb7e52a3d09ea12fd0c921fc5ef62f59fc4cc13  VirtualBox-6.1-6.1.18_142142_el7-1.x86_64.rpm

In comparison, the hash for 6.1.16 _is_ a match and installs successfully.

<package type="rpm">
  <name>VirtualBox-6.1</name>
  <arch>x86_64</arch>
  <version epoch="0" ver="6.1.16_140961_el7" rel="1"/>
  <checksum type="sha256" pkgid="YES">279c16c9101dbf198843ce491e1606cef821c6c6ca5fa9b18d706e44b42ec8bd</checksum>
08:56
user@machine:~/Downloads$ sha256sum VirtualBox-6.1-6.1.16_140961_el7-1.x86_64.rpm
279c16c9101dbf198843ce491e1606cef821c6c6ca5fa9b18d706e44b42ec8bd  VirtualBox-6.1-6.1.16_140961_el7-1.x86_64.rpm

Note: I had to choose "VirtualBox 6.1.16" as version for this ticket since "VirtualBox 6.1.18" is not yet available in the dropdown.

[arudnev]

Please confirm it is still the issue. When you tried to install rpm sync process was not done yet.

[Matthias Pfützner]

Here's the output from just now:

Dependencies resolved. ================================================================================

Package Arch Version Repository Size

================================================================================ Upgrading:

VirtualBox-6.1 x86_64 6.1.18_142142_el8-1 virtualbox 90 M

Transaction Summary ================================================================================ Upgrade 1 Package

Total download size: 90 M Is this ok [y/N]: y Downloading Packages: [MIRROR] VirtualBox-6.1-6.1.18_142142_el8-1.x86_64.rpm: Downloading successful, but checksum doesn't match. Calculated: 0d7fce624235015628bf65de9fa180b3f639a31f1f4831675b754cc09225479e(sha256) Expected: 5a58ec90d62d4b87a8bcdedd45796ad3abfe493efb5fd86a287e8a603ff2eeca(sha256) [MIRROR] VirtualBox-6.1-6.1.18_142142_el8-1.x86_64.rpm: Downloading successful, but checksum doesn't match. Calculated: 0d7fce624235015628bf65de9fa180b3f639a31f1f4831675b754cc09225479e(sha256) Expected: 5a58ec90d62d4b87a8bcdedd45796ad3abfe493efb5fd86a287e8a603ff2eeca(sha256) [MIRROR] VirtualBox-6.1-6.1.18_142142_el8-1.x86_64.rpm: Downloading successful, but checksum doesn't match. Calculated: 0d7fce624235015628bf65de9fa180b3f639a31f1f4831675b754cc09225479e(sha256) Expected: 5a58ec90d62d4b87a8bcdedd45796ad3abfe493efb5fd86a287e8a603ff2eeca(sha256) [MIRROR] VirtualBox-6.1-6.1.18_142142_el8-1.x86_64.rpm: Downloading successful, but checksum doesn't match. Calculated: 0d7fce624235015628bf65de9fa180b3f639a31f1f4831675b754cc09225479e(sha256) Expected: 5a58ec90d62d4b87a8bcdedd45796ad3abfe493efb5fd86a287e8a603ff2eeca(sha256) [FAILED] VirtualBox-6.1-6.1.18_142142_el8-1.x86_64.rpm: No more mirrors to try - All mirrors were already tried without success

The downloaded packages were saved in cache until the next successful transaction. You can remove cached packages by executing 'dnf clean packages'. Error: Error downloading packages:

Cannot download VirtualBox-6.1-6.1.18_142142_el8-1.x86_64.rpm: All mirrors were tried

This is on a RHEL 8.3 system...

[Matthias Pfützner]

And note: This tickets seems to have been opened against the WRONG version. The subject/title mentions the correct version, 6.1.18, but the bug has been opened again 6.1.16...

[arudnev]

When bug was created version 6.1.18 didn't exist, that was mentioned in description.

[Matthias Pfützner]

Replying to arudnev:

When bug was created version 6.1.18 didn't exist, that was mentioned in description.

Out of curiosity: Why did you CLOSE the bug? This BUG is still OPEN, because I can NOT update to 6.1.18...

[arudnev]

It's not a big deal to reopen a bug, please do not create duplicates if your bug is closed.

As for the matter: please check now, should be fixed last night.

[Matthias Pfützner]

Thanks for fixing it so quickly, the dnf update now worked seamlessly and flawlessly!