releng

#12768 Is isn't possible to check for the integrity of several files from the VirtIO-win repository
Closed: upstream by kevin. Opened by ananas-comosus.

Closed: upstream
Reopen Issue
  • Describe the issue
    Several files from the VirtIO-win repo doesn't have a hash. The CHECKSUM file from this directory, for example, doesn't contain hashes for virtio-win-guest-tools.exe, virtio-win-gt-x86.msi, virtio-win-gt-x64.msi and virtio-win-0.1.271.iso/virtio-win.iso. Files from other directories such as archive-qemu-ga also don't have hashes.

Also, the CHECKSUM files don't have any GPG signature, so it isn't possible to check if the file hasn't been tampered with.

  • When do you need this? (YYYY/MM/DD)
    N/A

  • When is this no longer needed or useful? (YYYY/MM/DD)
    N/A

  • If we cannot complete your request, what is the impact?
    Not possible to check the files integrity, which can be a security problem. Also, the files can be corrupted after downloading them.

Metadata Update from @phsmoura:
- Issue tagged with: medium-gain, medium-trouble, ops

This is not content created by releng. :)

You will want to mail:

virtmaint-sig-members@fedoraproject.org

about it. The virtmant-sig controls this content.

Metadata Update from @kevin:
- Issue close_status updated to: upstream
- Issue status updated to: Closed (was: Open)

Thanks!

This is not content created by releng. :)

You will want to mail:

virtmaint-sig-members@fedoraproject.org

about it. The virtmant-sig controls this content.
Metadata
None

medium-gain medium-trouble ops

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.