| Summary: | Failed to update metadata for lvfs: checksum failure | ||
|---|---|---|---|
| Product: | [Applications] Discover | Reporter: | tjxaires |
| Component: | discover | Assignee: | Dan Leinir Turthra Jensen <leinir> |
| Status: | RESOLVED UPSTREAM | ||
| Severity: | normal | CC: | aleixpol, nate, shr |
| Priority: | NOR | ||
| Version First Reported In: | 5.22.4 | ||
| Target Milestone: | --- | ||
| Platform: | Other | ||
| OS: | Linux | ||
| Latest Commit: | Version Fixed/Implemented In: | ||
| Sentry Crash Report: | |||
| Attachments: |
attachment-19425-0.html
attachment-17695-0.html attachment-18140-0.html |
||
|
Description
tjxaires
2021-08-04 16:02:42 UTC
Seems like this is a problem with the fwupd payload itself. I'm not sure how urgent this issue is. Can this issue be forwarded to the correct team? SUMMARY Failed to update metadata for lvfs: checksum failure: failed to verify data, expected 98261db7124c8026fb88f77768787efc2fc2f8344c3 The above message is seen upon opening discover for updates after restart of computer since a month or two ago ----------------- STEPS TO REPRODUCE 1. Opening discover 2. Search for updates 3. OBSERVED RESULT as explained in summary EXPECTED RESULT SOFTWARE/OS VERSIONS Operating System: Kubuntu 20.04 KDE Plasma Version: 5.18.5 KDE Frameworks Version: 5.68.0 Qt Version: 5.12.8 Kernel Version: 5.4.0-81-generic OS Type: 64-bit Processors: 4 × Intel® Core™ i5 CPU 660 @ 3.33GHz Memory: 5.7 GiB of RAM ADDITIONAL INFORMATION Error message last seen today 23 August 2021 As I mentioned, this is an issue with the Firmware update itself. You'd want to report it at https://github.com/fwupd/fwupd/issues Created attachment 155385 [details] attachment-19425-0.html Please forward to the appropriate party. On Thu, Jan 12, 2023 at 12:05 PM Nate Graham <bugzilla_noreply@kde.org> wrote: > https://bugs.kde.org/show_bug.cgi?id=440593 > > Nate Graham <nate@kde.org> changed: > > What |Removed |Added > > ---------------------------------------------------------------------------- > Status|REOPENED |RESOLVED > Resolution|--- |UPSTREAM > > --- Comment #4 from Nate Graham <nate@kde.org> --- > As I mentioned, this is an issue with the Firmware update itself. You'd > want to > report it at https://github.com/fwupd/fwupd/issues > > -- > You are receiving this mail because: > You reported the bug. That's up to you. :) Created attachment 155408 [details] attachment-17695-0.html When you say this is an issue with the "firmware update itself", are you implying that I potentially have malicious firmware on my machine? On Tue, Jan 17, 2023 at 11:25 AM Nate Graham <bugzilla_noreply@kde.org> wrote: > https://bugs.kde.org/show_bug.cgi?id=440593 > > --- Comment #6 from Nate Graham <nate@kde.org> --- > That's up to you. :) > > -- > You are receiving this mail because: > You reported the bug. Created attachment 155409 [details] attachment-18140-0.html Also, when I use sudo apt update && sudo apt full-upgrade from the command line, I don't get any error messages. On Wed, Jan 18, 2023 at 10:36 AM Tom Harris <tjxaires@gmail.com> wrote: > When you say this is an issue with the "firmware update itself", are you > implying that I potentially have malicious firmware on my machine? > > On Tue, Jan 17, 2023 at 11:25 AM Nate Graham <bugzilla_noreply@kde.org> > wrote: > >> https://bugs.kde.org/show_bug.cgi?id=440593 >> >> --- Comment #6 from Nate Graham <nate@kde.org> --- >> That's up to you. :) >> >> -- >> You are receiving this mail because: >> You reported the bug. > > (In reply to tjxaires from comment #7) > When you say this is an issue with the "firmware update itself", are you > implying that I potentially have malicious firmware on my machine? I don't know why there might be a checksum failure for this firmware update. It might be evidence of malicious software, it might have been a mix-up on the update server, or it might have been an error from the vendor. KDE isn't involved in any of those things though; you'd need to get into contact with the firmware vendor or the owners of the update server (https://fwupd.org/). (In reply to tjxaires from comment #8) > Also, when I use > > sudo apt update && sudo apt full-upgrade > > from the command line, I don't get any error messages. That makes sense, since apt doesn't handle firmware upgrades and therefore won't show you this problem. |