Rocky 9.4 hacked?

Good afternoon,

I wonder why control sum for https://download.rockylinux.org/pub/rocky/9/isos/x86_64/Rocky-9.4-x86_64-dvd.iso differs from what can be found in https://download.rockylinux.org/pub/rocky/9/isos/x86_64/CHECKSUM ?

sha256sum Rocky-9.4-x86_64-dvd.iso
b856de6e120075d2ccb65cd8697929d04475fc15a7d6a46aa191480069f345ff Rocky-9.4-x86_64-dvd.iso

but CHECKSUM file contains:

Rocky-9.4-x86_64-dvd.iso: 10916397056 bytes

SHA256 (Rocky-9.4-x86_64-dvd.iso) = e20445907daefbfcdb05ba034e9fc4cf91e0e8dc164ebd7266ffb8fdd8ea99e7

What’s going on?

Regards,
J

Firstly, let’s not jump to conclusions about being “hacked”.

Secondly, I am not seeing any issues. I suspect that your download is failing. I’ve just downloaded the artifact from dl.r.o and verified its checksum, as well as verified my copy of the rocky mirror:

nhanlon@ds918:/volume1/repos/mirror/rocky$ sha256sum 9/isos/x86_64/Rocky-9.4-x86_64-dvd.iso
e20445907daefbfcdb05ba034e9fc4cf91e0e8dc164ebd7266ffb8fdd8ea99e7  9/isos/x86_64/Rocky-9.4-x86_64-dvd.iso
nhanlon@ds918:/volume1/repos/mirror/rocky$ grep dvd 9/isos/x86_64/CHECKSUM
# Rocky-9.4-x86_64-dvd.iso: 10916397056 bytes
SHA256 (Rocky-9.4-x86_64-dvd.iso) = e20445907daefbfcdb05ba034e9fc4cf91e0e8dc164ebd7266ffb8fdd8ea99e7
2 Likes

Then seems something is fishy at my side.
Thanks for verification.

Have a nice afternoon,
J.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.