brew breaking with SHA256 mismatch error when trying to install volk.

[John-Telek]

Output of brew config

johntelek@Johns-Mac-mini ~ % brew config
HOMEBREW_VERSION: 4.0.16-15-gfec24f5
ORIGIN: https://github.com/Homebrew/brew
HEAD: fec24f5c08b1792f96cefae13a69d0f2a9abdbab
Last commit: 16 hours ago
Core tap origin: https://github.com/Homebrew/homebrew-core
Core tap HEAD: 507f355a39035dc293b7b96045a1ce66acd114c0
Core tap last commit: 29 minutes ago
Core tap branch: master
HOMEBREW_PREFIX: /usr/local
HOMEBREW_CASK_OPTS: []
HOMEBREW_DISPLAY: /private/tmp/com.apple.launchd.yh27uOOJ5Q/org.xquartz:0
HOMEBREW_MAKE_JOBS: 8
HOMEBREW_NO_INSTALL_FROM_API: set
Homebrew Ruby: 2.6.10 => /usr/local/Homebrew/Library/Homebrew/vendor/portable-ruby/2.6.10_1/bin/ruby
CPU: octa-core 64-bit ivybridge
Clang: 12.0.0 build 1200
Git: 2.24.3 => /Applications/Xcode.app/Contents/Developer/usr/bin/git
Curl: 7.64.1 => /usr/bin/curl
macOS: 10.15.7-x86_64
CLT: 12.4.0.0.1.1610135815
Xcode: 12.4
johntelek@Johns-Mac-mini ~ %

Output of brew doctor

johntelek@Johns-Mac-mini ~ % brew doctor
Please note that these warnings are just used to help the Homebrew maintainers
with debugging if you file an issue. If everything you use Homebrew for is
working fine: please don't worry or file an issue; just ignore this. Thanks!

Warning: Unbrewed dylibs were found in /usr/local/lib.
If you didn't put them there on purpose they could cause problems when
building Homebrew formulae, and may need to be deleted.

Unexpected dylibs:
  /usr/local/lib/libcorrect.dylib
  /usr/local/lib/librtlsdr.0.0.0.dylib
  /usr/local/lib/librtlsdr.0.dylib
  /usr/local/lib/librtlsdr.dylib
  /usr/local/lib/libsdrpp_core.dylib

Warning: Unbrewed header files were found in /usr/local/include.
If you didn't put them there on purpose they could cause problems when
building Homebrew formulae, and may need to be deleted.

Unexpected header files:
  /usr/local/include/correct-sse.h
  /usr/local/include/correct.h

Warning: Unbrewed static libraries were found in /usr/local/lib.
If you didn't put them there on purpose they could cause problems when
building Homebrew formulae, and may need to be deleted.

Unexpected static libraries:
  /usr/local/lib/libcorrect.a

Warning: You have unlinked kegs in your Cellar.
Leaving kegs unlinked can lead to build-trouble and cause formulae that depend on
those kegs to fail to run properly once built. Run `brew link` on these:
  librtlsdr

Warning: You are using macOS 10.15.
We (and Apple) do not provide support for this old version.
It is expected behaviour that some formulae will fail to build in this old version.
It is expected behaviour that Homebrew will be buggy and slow.
Do not create any issues about this on Homebrew's GitHub repositories.
Do not create any issues even if you think this message is unrelated.
Any opened issues will be immediately closed without response.
Do not ask for help from Homebrew or its maintainers on social media.
You may ask for help in Homebrew's discussions but are unlikely to receive a response.
Try to figure out the problem yourself and submit a fix as a pull request.
We will review it but may or may not accept it.

johntelek@Johns-Mac-mini ~ %

Description of issue

==> Fetching cpu_features
==> Downloading https://github.com/google/cpu_features/archive/v0.8.0.tar.gz
Already downloaded: /Users/johntelek/Library/Caches/Homebrew/downloads/987ce5a9627ffb58af330dbb6bbfeab569d17a883a9fcb9d061061a40233aa64--cpu_features-0.8.0.tar.gz
Error: volk: SHA256 mismatch <----------------------------------ERROR-------------------------------------
Expected: a3fc6a08ebbf40c538456d6a20ab294658bcebc8d0918457f33cb86f868f16a2
Actual: 7021729f2db97aa34f218d12727314f23e8b11eaa2d5a907e8426bcb41d7eaac
File: /Users/johntelek/Library/Caches/Homebrew/downloads/987ce5a9627ffb58af330dbb6bbfeab569d17a883a9fcb9d061061a40233aa64--cpu_features-0.8.0.tar.gz
To retry an incomplete download, remove the file above.
johntelek@Johns-Mac-mini ~ %

[carlocab]

Looks like the checksum for the v0.8.0 archive at https://github.com/google/cpu_features.git changed.

Could you report this to https://github.com/google/cpu_features.git? This is a potential security issue, so we want to check that the change is checksum was intentional before proceeding. This is often caused by tags being replaced for innocuous reasons, but we should make sure before assuming this.

[John-Telek]

Done.

:)

[John-Telek]

Done mate. Cheers,    John.

…

On Thu, 2023-05-04 at 03:26 +0000, Carlo Cabrera wrote: Looks like the checksum for the v0.8.0 archive at https://github.com/google/cpu_features.git changed. Could you report this to https://github.com/google/cpu_features.git? This is a potential security issue, so we want to check that the change is checksum was intentional before proceeding. This is often caused by tags being replaced for innocuous reasons, but we should make sure before assuming this. — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you authored the thread.Message ID: <Homebrew/discussions/repo- ***@***.***>

[chenrui333]

fixed by Homebrew/homebrew-core#131183