Chocolatey: vcredist 2005/2008/2010 updates failing as Microsoft rebuilt the installers multiple times causing new hashes each time
Posted by jpluimers on 2021/05/14
The Microsoft rebuilt move affects these Chocolatey Microsoft Visual C++ Redistributable packages, usually multiple times:
- [Archive.is] Chocolatey Software | Microsoft Visual C++ 2005 SP1 Redistributable Package 8.1.0.20160118
- [Archive.is] Chocolatey Software | Microsoft Visual C++ 2008 SP1 Redistributable Package 9.0.30729.6163
- [Archive.is] Chocolatey Software | Microsoft Visual C++ 2010 Redistributable Package 10.0.40219.325
You get error messages like this:
ERROR: Checksum for 'C:\Users\saroot\AppData\Local\Temp\chocolatey\vcredist2010\10.0.40219.2\vcredist_x86.exe' did not meet '66B797B3B4F99488F53C2B676610DFE9868984C779536891A8D8F73EE214BC4B' for checksum type 'sha256'. Consider passing the actual checksums through with --checksum --checksum64 once you validate the checksums are appropriate. A less secure option is to pass --ignore-checksums if necessary
The cause is [Archive.is] vcredist-all fails to install due to broken checksum of vcredist2005, vcredist2008 and vcredist2010 · Issue #105 · jberezanski/ChocolateyPackages
jberezanskicommented
Great, Microsoft is apparently on an in-place installer update spree.
Actually, this is not a problem with
vcredist-all
, but rather with those specific packages and should be reported to maintainers of those packages. It so happens, however, that I’m also one of the maintainers of vcredist2008 and vcredist2010 (which live in https://github.com/chocolatey-community/chocolatey-coreteampackages/tree/master/manual). I’ve already prepared a fix for 2010 and I guess I’ll do 2008 tomorrow.As for 2005, I can see that it has the same maintainer as
vcredist2010
had until very recently – when we took over that package because the maintainer did not respond. So we probably should take over 2005, too.
Progress
The vcredist2010
package has been modified two times for this:
- [Wayback/Archive.is] (vcredist2010) Import and update to newest version by jberezanski · Pull Request #1643 · chocolatey-community/chocolatey-coreteampackages
- [Wayback/Archive.is] (vcredist2010) Fixed checksums and added update script by jberezanski · Pull Request #1654 · chocolatey-community/chocolatey-coreteampackages
Hopefully the vcredist2008
and vcredist2005
packages will follow soon.
–jeroen
Leave a Reply