id,summary,reporter,owner,description,type,status,component,version,resolution,keywords,cc,guest,host
20138,Virtualbox 6.1.18 package has incorrect metadata (Package does not match intended download. ),haster,,"When trying to install the virtualbox 6.1.18 rpm package using yum on centos, the installation fails:


{{{
Downloading packages:
[91mhttp://download.virtualbox.org/virtualbox/rpm/el/7/x86_64/VirtualBox-6.1-6.1.18_142142_el7-1.x86_64.rpm: [Errno -1] Package does not match intended download. Suggestion: run yum --enablerepo=virtualbox clean metadata
}}}

The cause is incorrect metadata, specifically the hash does not match the package.

{{{
<package type=""rpm"">
  <name>VirtualBox-6.1</name>
  <arch>x86_64</arch>
  <version epoch=""0"" ver=""6.1.18_142142_el7"" rel=""1""/>
  <checksum type=""sha256"" pkgid=""YES"">9adb0e02b6b43d589a59b0b6408f02edd558bb6d284b5adcd3f307ec06bc1c47</checksum>

user@machine:~/Downloads$ sha256sum VirtualBox-6.1-6.1.18_142142_el7-1.x86_64.rpm 
aaf59fb6cbfa9cc44a6f0b45bbb7e52a3d09ea12fd0c921fc5ef62f59fc4cc13  VirtualBox-6.1-6.1.18_142142_el7-1.x86_64.rpm
}}}

In comparison, the hash for 6.1.16 _is_ a match and installs successfully.

{{{
<package type=""rpm"">
  <name>VirtualBox-6.1</name>
  <arch>x86_64</arch>
  <version epoch=""0"" ver=""6.1.16_140961_el7"" rel=""1""/>
  <checksum type=""sha256"" pkgid=""YES"">279c16c9101dbf198843ce491e1606cef821c6c6ca5fa9b18d706e44b42ec8bd</checksum>
08:56
user@machine:~/Downloads$ sha256sum VirtualBox-6.1-6.1.16_140961_el7-1.x86_64.rpm
279c16c9101dbf198843ce491e1606cef821c6c6ca5fa9b18d706e44b42ec8bd  VirtualBox-6.1-6.1.16_140961_el7-1.x86_64.rpm
}}}



Note: I had to choose ""VirtualBox 6.1.16"" as version for this ticket since ""VirtualBox 6.1.18"" is not yet available in the dropdown.
",defect,closed,other,VirtualBox 6.1.18,fixed,package rpm hash,,other,Linux