Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update to v.3.12.1 fails and virus detected #4

Closed
MiMoHo opened this issue Mar 7, 2024 · 2 comments
Closed

Update to v.3.12.1 fails and virus detected #4

MiMoHo opened this issue Mar 7, 2024 · 2 comments

Comments

@MiMoHo
Copy link

MiMoHo commented Mar 7, 2024

v3.12.1 can't be automatically updated, nor installed via pkg when the app is already installed.
When removing the app and running the installer, Avira detects a virus for v3.12.1 after installation completion:
Avira Security blocked a threat

@expiredemulsion
Copy link

It appears to be a signing error.

Code signature scan of all bundles in the folder /Users/user/Desktop/test:

/Users/user/Desktop/test/Nextcloud.app error -67054 a sealed resource is missing or invalid
/Users/user/Desktop/test/Nextcloud.app isn't signed or recognised.
/Users/user/Desktop/test/Nextcloud.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app is Notarized.

Found 1 bundle signing errors out of 55 scanned in /Users/user/Desktop/test
Checked at Friday, 8 March 2024 at 07:32:07 Central European Standard Time

Quarantine flag found: 0182
This is an app.
✅ No 32-bit only components were found.

App signature check:
⛔️ spctl error 3
/Users/user/Desktop/test/Nextcloud.app: rejected (invalid destination for symbolic link in bundle)
origin=Developer ID Application: Nextcloud GmbH (NKUJUXUJ3B)

codesign check:
Executable=/Users/user/Desktop/test/Nextcloud.app/Contents/MacOS/Nextcloud
Identifier=com.nextcloud.desktopclient
Format=app bundle with Mach-O universal (x86_64 arm64)
CodeDirectory v=20500 size=64743 flags=0x10000(runtime) hashes=2016+3 location=embedded
Hash type=sha256 size=32
CandidateCDHash sha256=8c195d739d507aa5a25dbd670c483ab7d6d1c190
CandidateCDHashFull sha256=8c195d739d507aa5a25dbd670c483ab7d6d1c1905b762369a3cda45453f4b247
Hash choices=sha256
CMSDigest=8c195d739d507aa5a25dbd670c483ab7d6d1c1905b762369a3cda45453f4b247
CMSDigestType=2
CDHash=8c195d739d507aa5a25dbd670c483ab7d6d1c190
Signature size=8978
Authority=Developer ID Application: Nextcloud GmbH (NKUJUXUJ3B)
Authority=Developer ID Certification Authority
Authority=Apple Root CA
Timestamp=6 Mar 2024 at 12:47:28
Info.plist entries=22
TeamIdentifier=NKUJUXUJ3B
Runtime Version=14.0.0
Sealed Resources version=2 rules=13 files=931
Internal requirements count=1 size=188

@mgallien
Copy link
Collaborator

mgallien commented Apr 2, 2024

@MiMoHo any issue would need to be reported there https://github.com/nextcloud/desktop/issues

@mgallien mgallien closed this as completed Apr 2, 2024
@nextcloud-releases nextcloud-releases locked as off-topic and limited conversation to collaborators Apr 2, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

No branches or pull requests

3 participants