"ignoring malicious file" error from apk when trying to install ca-certificates-20191127-r5 for x86 from edge (other arches work)
With the just released upgrade to apk-tools
currently it is not possible to install ca-certificates
for x86
. It works fine for x86_64, aarch64, armhf, armv7.
# apk add ca-certificates
(1/1) Installing ca-certificates (20191127-r5)
WARNING: ca-certificates-20191127-r5: ignoring malicious file usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt
Executing busybox-1.33.0-r1.trigger
Executing ca-certificates-20191127-r5.trigger
1 error; 9 MiB in 21 packages
One way to reproduce: pmbootstrap -q chroot -bx86 -- apk add ca-certificates
Files:
- x86: ca-certificates-20191127-r5_1_.apk
- x86_64: ca-certificates-20191127-r5.apk
- aarch64: ca-certificates-20191127-r5_2_.apk
CC: @fabled
Side note: it's a bit confusing that apk says WARNING, then fails with error.