SLES 15 - SLE-Module-Python3-15-SP6-Updates - python311-gobject has incorrect sha256 hash

SUSE Public Cloud Amazon-EC2
1

Running SLES 15 in AWS EC2 in the us-east-1 region. The package python311-gobject-3.44.1-150400.3.9.2.aarch64 has an incorrect sha256 hash

ip-172-31-69-26:~ # zypper install python311-gobject-3.44.1-150400.3.9.2
Refreshing service 'Basesystem_Module_aarch64'.
Refreshing service 'Containers_Module_aarch64'.
Refreshing service 'Desktop_Applications_Module_aarch64'.
Refreshing service 'Development_Tools_Module_aarch64'.
Refreshing service 'Public_Cloud_Module_aarch64'.
Refreshing service 'Python_3_Module_aarch64'.
Refreshing service 'SUSE_Linux_Enterprise_Server_aarch64'.
Refreshing service 'Server_Applications_Module_aarch64'.
Refreshing service 'Systems_Management_Module_aarch64'.
Refreshing service 'Web_and_Scripting_Module_aarch64'.
Loading repository data...
Reading installed packages...
Resolving package dependencies...

The following NEW package is going to be installed:
  python311-gobject

1 new package to install.

Package download size:   425.3 KiB

Package install size change:
              |       1.5 MiB  required by packages that will be installed
     1.5 MiB  |  -      0 B    released by packages that will be removed

Backend:  classic_rpmtrans
Continue? [y/n/v/...? shows all options] (y): y
Retrieving: python311-gobject-3.44.1-150400.3.9.2.aarch64 (SLE-Module-Python3-15-SP6-Updates)                                                                (1/1), 425.3 KiB
Retrieving: python311-gobject-3.44.1-150400.3.9.2.aarch64.rpm .............................................................................................................[done]

Warning: Digest verification failed for file 'python311-gobject-3.44.1-150400.3.9.2.aarch64.rpm'
[/var/tmp/AP_0xjJPiXk/aarch64/python311-gobject-3.44.1-150400.3.9.2.aarch64.rpm]

  expected 233bca45917a67aa6e69d963c38f07011ba3013aafb9947a148dc39bc9286c86
  but got  2bf6a961d2ce181a762e48b095abf0c9b9bf46087d4e4714358f883bbfd716a6

Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise.

However if you made certain that the file with checksum '2bf6..' is secure, correct
and should be used within this operation, enter the first 4 characters of the checksum
to unblock using this file on your own risk. Empty input will discard the file.

Unblock or discard? [2bf6/...? shows all options] (discard): discard
Package python311-gobject-3.44.1-150400.3.9.2.aarch64 (SLE-Module-Python3-15-SP6-Updates) seems to be corrupted during transfer. Do you want to retry retrieval?
Abort, retry, ignore? [a/r/i] (a): a
Problem occurred during or after installation or removal of packages:
Installation has been aborted as directed.
Please see the above error message for a hint.

From the zypper logs, it looks like this package comes from this url.

https://smt-ec2.susecloud.net/repo/SUSE/Updates/SLE-Module-Python3/15
-SP6/aarch64/update/aarch64/python311-gobject-3.44.1-150400.3.9.2.aarch64.rpm?credentials=Python_3_Module_aarch64

I saw the same issue on two SP6 amis. I didn’t have issue with this package in SP7.

ami-04d678a7f4214e453 - i-0db7c4374af27199a - us-east-1
ami-09b32e2035fc9ca84 - i-011d8b60a9b0189e6 - us-east-1
2

Sorry, this issue was reported earlier. I was under the impression that the problem was with x86 repositories specifically. I am now fixing the issue with aarch64 repositories. The repositories should be fixed in the next couple hours. Please let me know if it persists.

3

Tested with ami-09b32e2035fc9ca84

Retrieving: python311-gobject-3.44.1-150400.3.9.2.aarch64 (SLE-Module-Python3-15-SP6-Updates) (1/1), 425.3 KiB
Retrieving: python311-gobject-3.44.1-150400.3.9.2.aarch64.rpm …[done]

Checking for file conflicts: …[done]
(1/1) Installing: python311-gobject-3.44.1-150400.3.9.2.aarch64 …[done]

4

Thank you! works for me on the same ami as well

ip-172-31-69-26:~ # zypper install python311-gobject-3.44.1-150400.3.9.2
Refreshing service 'Basesystem_Module_aarch64'.
Refreshing service 'Containers_Module_aarch64'.
Refreshing service 'Desktop_Applications_Module_aarch64'.
Refreshing service 'Development_Tools_Module_aarch64'.
Refreshing service 'Public_Cloud_Module_aarch64'.
Refreshing service 'Python_3_Module_aarch64'.
Refreshing service 'SUSE_Linux_Enterprise_Server_aarch64'.
Refreshing service 'Server_Applications_Module_aarch64'.
Refreshing service 'Systems_Management_Module_aarch64'.
Refreshing service 'Web_and_Scripting_Module_aarch64'.
Loading repository data...
Reading installed packages...
Resolving package dependencies...

The following NEW package is going to be installed:
  python311-gobject

1 new package to install.

Package download size:   425.3 KiB

Package install size change:
              |       1.5 MiB  required by packages that will be installed
     1.5 MiB  |  -      0 B    released by packages that will be removed

Backend:  classic_rpmtrans
Continue? [y/n/v/...? shows all options] (y): y
Retrieving: python311-gobject-3.44.1-150400.3.9.2.aarch64 (SLE-Module-Python3-15-SP6-Updates)                                                             (1/1), 425.3 KiB
Retrieving: python311-gobject-3.44.1-150400.3.9.2.aarch64.rpm ..........................................................................................................[done]

Checking for file conflicts: ...........................................................................................................................................[done]
(1/1) Installing: python311-gobject-3.44.1-150400.3.9.2.aarch64 ........................................................................................................[done]
ip-172-31-69-26:~ #
5

looks like the issue with the corrupted checksum on that python311-gobject package has been fixed on the aarch64 repos. if you’re still seeing issues, it might be worth clearing your local cache with zypper clean and trying the install again. otherwise, glad it worked out for you! seems like the fix was rolled out for both x86 and aarch64 now, so it should be smooth sailing.