Re: TW: libmbedcrypto16-3.6.6-1.2.x86_64.rpm - wrong checksum?

On 2026-07-07 21:06, Peter Maffter via openSUSE Users wrote:
> Warning: Digest verification failed for file 
> 'libmbedcrypto16-3.6.6-1.2.x86_64.rpm'
> [...]
>   expected 
> 1521a56b09dc64e6c5511d8f3111c58a3b1bdb63ce0535273099fab5ecf2cf82aa1c946529d07d2a02b68654374192fd267df90ad3d3ab260631e79fe4c261af
>   but got 
> f1905f58ec69b547e379a6b4181715105d740553682932ab1f581fd70135073288647b2473590a3b18fc7463ae1b0fb3f1b93332a0c838babe45ad3c4f07475f
> [...]
> Is that a security issue or just some wrong repos?

The question is slightly misleading and incomplete. In any case... 
Package digest verification is a security control. Right now it is 
failing to verify for you, and you should should pay attention to it. In 
all likelihood it is a temporarily incomplete mirror that will 
self-correct itself soon. However the nature of the security control 
being as it is, there is no way to know for certain, including this 
statement.

Andreas