Message "Wrong Digest" in zypper

zypper up

Retrieving repository ‘Debug Updates 13.2’ metadata ----------------------------------------------------------------------------------------------------]

Warning: Digest verification failed for file ‘b027d11dc11d6e216f08197182aa6cf4e275c19b42a63db497362b43c4b3b7ac-appdata.xml.gz’

expected 898c1fc60f2e5b255a35d0654935ec36f1f5bee5afef63a141e932f0703c46a9
but got 4fcc9e2e4f6fdd71c6d08479ab2a863eb097deea14dee29cee78224d41307a54

Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise.

However if you made certain that the file with checksum ‘4fcc…’ is secure, correct
and should be used within this operation, enter the first 4 characters of the checksum
to unblock using this file on your own risk. Empty input will discard the file.

In Yast2 a second message:

There was an error in the repository initialization.
[Dupu_Updates_13.2|] Valid metadata not found at specified URL

  • b027d11dc11d6e216f08197182aa6cf4e275c19b42a63db497362b43c4b3b7ac-appdata.xml.gz has wrong checksum

I will not do any update until this message goes away.

Why not just disable the debug-update repo?
You don’t need it anyway, unless you want to debug crashes.

Oh, and it only contains debug information for the packages in the update repo. Unlikely that a hacked repo could do anything to your system… :wink:

I occasionally see similar messages. It recently happened in Tumbleweed.

When that happens, I cancel out. Then I wait a few hours and try again. And usually all is fine at that time.

I think (ok, make that “guess”) it is due to using a mirror that is being updated while you are using it.

Okay. Disabled the debug repo, runs fine.