![]() ![]() ![]() The bug is listed in the “Resolved Issues” section of the 11.5 release notes.Microsoft is tightening the requirements for people to run Windows 11 on their computers, muchly around the issue of security. They asked me to wait until the fix was available before publicly disclosing which I agreed to. In an email on January 26th VMware indicated that the fix wasn’t straightforward and would be shipped in the next major release. They were prompt in their replies and happy to share technical details of what they learned about the bug and their fix. I had a very positive experience disclosing this issue to VMware. They then realised that they had Fusion 11.0.0 so they updated to 11.0.2 and reran the pkgutil command and sure enough the signature was broken. They ran the pkgutil command and the signature was fine. Ninji was kind enough to attempt to reproduce it for me. ![]() I decided to see if it was reproducible so I went on to Abertay Ethical Hacking Society’s Slack and jumped in the #mac channel. ![]() I assumed this was an error with pkgutil or that I’d accidentally modified VMware Fusion.app and broken the signature. Status: package is invalid (checksum did not verify) I noticed that it was reporting VMware Fusion 11 ( 11.0.2) as not being properly signed, specifically pkgutil gave the following error. The script gets a list of all application bundles byĮxecuting system_profiler SPApplicationsDataType, for each application it checks their code signature by executing pkgutil -check-signature. On Christmas Eve 2018 I was writing a bash script to check the code signing status of every application bundle on my system. Adding these new files breaks the code signature. When upgrading Fusion, Fusion would download updated files from the update server and combine them into a new VMware Fusion.app. You can get the 11.5 installer from /go/getfusion. To upgrade to Fusion 11.5 you’ll need to download a package from VMware, you can’t update via the builtin software updated because it suffers from the bug. app) to be broken after applying updates. The update, among other things, addresses a bug which would cause the code signature of the VMware Fusion application bundle (. Fusion is VMware’s virtualisation software for macOS. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |