Bug#1027103: virtualbox-ext-pack: Hash mismatch Oracle_VM_VirtualBox_Extension_Pack-6.1.40.vbox-extpack

[Nelson Suniaga Romero]

Package: virtualbox-ext-pack
Version: 6.1.40-1~fto11+1
Severity: normal
X-Debbugs-Cc: nelson....@gmail.com

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

* What led up to the situation? The Oracle package
https://download.virtualbox.org/virtualbox/6.1.40/Oracle_VM_VirtualBox_Extension_Pack-6.1.40.vbox-
extpack doesn't have the expected hash by Debian APT.
* What exactly did you do (or not do) that was effective (or
ineffective)? Nothing.
* What was the outcome of this action?
* What outcome did you expect instead?

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 11.6
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500,
'proposed-updates'), (500, 'stable'), (100, 'bullseye-fasttrack'), (100,
'bullseye-backports-staging')
Architecture: amd64 (x86_64)

Kernel: Linux 5.19.0-0.deb11.2-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not
set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages virtualbox-ext-pack depends on:
ii debconf [debconf-2.0] 1.5.77
ii virtualbox 6.1.40-dfsg-1~fto11+1
ii wget 1.21-1+deb11u1

virtualbox-ext-pack recommends no packages.

[Nelson Jesus Suniaga Romero]

If the package has been corrupted, curiously, the corruption is recurring and only happens with that one, the rest of the VirtualBox packages were downloaded and installed without errors.

After reading your reply I apt-updated and reinstalled virtualbox-ext-pack with the same result:

root@slimshadygray:~# apt install virtualbox-ext-pack
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following NEW packages will be installed:
  virtualbox-ext-pack
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 14.0 kB of archives.
After this operation, 142 kB of additional disk space will be used.
Get:1 https://fasttrack.debian.net/debian-fasttrack bullseye-fasttrack/contrib amd64 virtualbox-ext-pack all 6.1.40-1~fto11+1 [14.0 kB]
Fetched 14.0 kB in 2s (5,827 B/s)              
Preconfiguring packages ...
Selecting previously unselected package virtualbox-ext-pack.
(Reading database ... 831014 files and directories currently installed.)
Preparing to unpack .../virtualbox-ext-pack_6.1.40-1~fto11+1_all.deb ...
License has already been accepted.
Unpacking virtualbox-ext-pack (6.1.40-1~fto11+1) ...
Setting up virtualbox-ext-pack (6.1.40-1~fto11+1) ...
virtualbox-ext-pack: downloading: https://download.virtualbox.org/virtualbox/6.1.40/Oracle_VM_VirtualBox_Extension_Pack-6.1.40.vbox-ext
pack
The file will be downloaded into /usr/share/virtualbox-ext-pack
Hash mismatch Oracle_VM_VirtualBox_Extension_Pack-6.1.40.vbox-extpack: expected 29cf8410e2514ea4393f63f5e955b8311787873679fc23ae9a897fb
70ef3f84a, removing the file.
dpkg: error processing package virtualbox-ext-pack (--configure):
 installed virtualbox-ext-pack package post-installation script subprocess returned error exit status 1
Errors were encountered while processing:
 virtualbox-ext-pack
E: Sub-process /usr/bin/dpkg returned an error code (1)
root@slimshadygray:~#

I tried to download the same package without success:

nelson@slimshadygray:~$ su -
Password:
root@slimshadygray:~# wget https://download.virtualbox.org/virtualbox/6.1.40/Oracle_VM_VirtualBox_Extension_Pack-6.1.40.vbox-ext
pack
--2023-01-05 13:32:29--  https://download.virtualbox.org/virtualbox/6.1.40/Oracle_VM_VirtualBox_Extension_Pack-6.1.40.vbox-ext
Resolving download.virtualbox.org (download.virtualbox.org)... 184.84.132.88
Connecting to download.virtualbox.org (download.virtualbox.org)|184.84.132.88|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
2023-01-05 13:32:35 ERROR 403: Forbidden.

-bash: pack: command not found
root@slimshadygray:~# 

A simple experiment would be to download the same package from another repository and get its hash, comparing it with the expected by apt.

El jue, 5 ene 2023 a la(s) 09:30, Debian Bug Tracking System (ow...@bugs.debian.org) escribió:

This is an automatic notification regarding your Bug report
which was filed against the virtualbox-ext-pack package:

#1027103: virtualbox-ext-pack: Hash mismatch Oracle_VM_VirtualBox_Extension_Pack-6.1.40.vbox-extpack

It has been closed by Gianfranco Costamagna <locutu...@debian.org>.

Their explanation is attached below along with your original report.
If this explanation is unsatisfactory and you have not received a
better one in a separate message then please contact Gianfranco Costamagna <locutu...@debian.org> by
replying to this email.


--
1027103: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1027103
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



---------- Forwarded message ----------
From: Gianfranco Costamagna <locutu...@debian.org>
To: 102710...@bugs.debian.org
Cc: 
Bcc: 
Date: Thu, 5 Jan 2023 14:27:05 +0100
Subject: Re: virtualbox-ext-pack: Hash mismatch Oracle_VM_VirtualBox_Extension_Pack-6.1.40.vbox-extpack
29cf8410e2514ea4393f63f5e955b8311787873679fc23ae9a897fb70ef3f84a *Oracle_VM_VirtualBox_Extension_Pack-6.1.40-154048.vbox-extpack
29cf8410e2514ea4393f63f5e955b8311787873679fc23ae9a897fb70ef3f84a *Oracle_VM_VirtualBox_Extension_Pack-6.1.40.vbox-extpack


And

cat debian/postinst.in
#!/bin/sh
#set -e

version=#VERSION#
hash=29cf8410e2514ea4393f63f5e955b8311787873679fc23ae9a897fb70ef3f84a
file=Oracle_VM_VirtualBox_Extension_Pack-$version.vbox-extpack
accept_license=33d7284dc4a0ece381196fda3cfe2ed0e1e8e7ed7f27b9a9ebc4ee22e24bd23c

Looks good to me.

maybe your download was corrupted.

G.