Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Installation -> CorruptZip: end of central directory record signature not found #4474

Closed
6 tasks
alexanderarnst opened this issue Mar 23, 2023 · 31 comments
Closed
6 tasks
Assignees
Labels
Issue-Bug A bug to squash. Resolution-External Will close automatically.

Comments

@alexanderarnst
Copy link

alexanderarnst commented Mar 23, 2023

Prerequisites

  • I have written a descriptive issue title.
  • I have searched all open and closed issues to ensure it has not already been reported.
  • I have read the troubleshooting guide.
  • I am sure this issue is with the extension itself and does not reproduce in a standalone PowerShell instance.
  • I have verified that I am using the latest version of Visual Studio Code and the PowerShell extension.
  • If this is a security issue, I have read the security issue reporting guidance.

Summary

Hi guys,

I have fresh installed VS Code and try to install the Powershell extension from MS. Unfortunatelly there is just an error, that the downloaded Zip is corrupted. No infromation about which URL was accessed, nor where to find the corrupted Zip File... Any ideas? Other extensions, like the "poweshellprotools" installs with not problems.

2023-03-23 08:55:50.456 [error] CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:55:50.476 [error] end of central directory record signature not found: CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)

Thanks a lot in advance.
Alexander

PowerShell Version

PS C:\Users\860000165> $PSVersionTable

Name                           Value
----                           -----
PSVersion                      5.1.19041.2673
PSEdition                      Desktop
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}
BuildVersion                   10.0.19041.2673
CLRVersion                     4.0.30319.42000
WSManStackVersion              3.0
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1

Visual Studio Code Version

PS C:\Users\860000165> code --version
1.76.2
ee2b180d582a7f601fa6ecfdad8d9fd269ab1884
x64

Extension Version

PS C:\Users\860000165> code --list-extensions --show-versions | Select-String powershell

ironmansoftware.powershellprotools@2023.3.0

Steps to Reproduce

  1. Open VS Code -> Extensions
  2. Search for powershell Extension from MS
  3. Click the "Install" button.
  4. The error appears in the Output window.

Visuals

image

Logs

2023-03-23 08:44:05.389 [info] Electron sandbox mode is enabled!
2023-03-23 08:44:07.678 [warning] Settings pattern "application." doesn't match any settings
2023-03-23 08:44:15.640 [warning] Settings pattern "application.
" doesn't match any settings
2023-03-23 08:44:18.632 [warning] Settings pattern "application." doesn't match any settings
2023-03-23 08:44:20.589 [warning] Settings pattern "application.
" doesn't match any settings
2023-03-23 08:44:22.268 [info] [perf] Render performance baseline is 141ms
2023-03-23 08:44:22.685 [warning] Settings pattern "application." doesn't match any settings
2023-03-23 08:44:24.994 [error] CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:44:25.008 [error] end of central directory record signature not found: CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:52:39.743 [error] CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:52:39.780 [error] end of central directory record signature not found: CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:52:47.432 [error] CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:52:47.435 [error] end of central directory record signature not found: CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:54:06.547 [error] CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:54:06.598 [error] end of central directory record signature not found: CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:54:08.347 [error] CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:54:08.350 [error] end of central directory record signature not found: CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:54:23.337 [warning] Settings pattern "application.
" doesn't match any settings
2023-03-23 08:55:32.049 [error] CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:55:32.071 [error] end of central directory record signature not found: CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:55:49.417 [error] CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:55:49.438 [error] end of central directory record signature not found: CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:55:50.456 [error] CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)
2023-03-23 08:55:50.476 [error] end of central directory record signature not found: CorruptZip: end of central directory record signature not found
at yt.download (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:223)
at process.processTicksAndRejections (node:internal/process/task_queues:96:5)
at async X.x (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:20760)
at async X.h (vscode-file://vscode-app/c:/Users/860000165/AppData/Local/Programs/Microsoft%20VS%20Code/resources/app/out/vs/code/node/sharedProcess/sharedProcessMain.js:91:18897)

@alexanderarnst alexanderarnst added the Issue-Bug A bug to squash. label Mar 23, 2023
@ghost ghost added the Needs: Triage Maintainer attention needed! label Mar 23, 2023
@andyleejordan
Copy link
Member

I would try restarting VS Code, clearing any cache it has if possible, and trying again. My guess is it just got corrupted when downloading (like a transient network or disk issue), as I haven't otherwise heard of this being an issue (and I would expect to given the amount of users it has).

@andyleejordan andyleejordan added Needs: Author Feedback Please give us the requested feedback! and removed Needs: Triage Maintainer attention needed! labels Mar 23, 2023
@dramerus
Copy link

I also have this issue, with both my local and portable installs. The only resolution that seemed to work was manually downloading the .vsix file and installing it that way.

Waiting to see if it will upgrade with the next release or if I'll need to manually upgrade moving forward.

@Mehdi-Dehghan
Copy link

I've been having the same issue with any extension and I tried to use downloaded .vsix files. but the vscode showed "end of central directory record signature not found"!

@andyleejordan
Copy link
Member

Interesting...I'm trying to get a new pre-release out today for you guys to try. I wonder if just a bad upload happened.

@andyleejordan andyleejordan self-assigned this Mar 27, 2023
@andyleejordan
Copy link
Member

andyleejordan commented Mar 27, 2023

Hey all, a new pre-release is available. Can you try again?

Thanks!

@andyleejordan
Copy link
Member

Since this recently changed (the separate "Preview" extension is no more) that means going to the "PowerShell" extension in the marketplace within VS Code and clicking this "Switch to Pre-Release Version" button:

Screenshot 2023-03-27 at 5 00 07 PM

@alexanderarnst
Copy link
Author

alexanderarnst commented Mar 28, 2023 via email

@ghost ghost added Needs: Maintainer Attention Maintainer attention needed! and removed Needs: Author Feedback Please give us the requested feedback! labels Mar 28, 2023
@andyleejordan
Copy link
Member

Hm...what happens if you download the VSIX file from here: https://github.com/PowerShell/vscode-powershell/releases/tag/v2023.3.2-preview

and install it "manually" that is in the VS Code Command picker, choose "Extensions: Install from VSIX" and then point it to the downloaded VSIX.

@SydneyhSmith SydneyhSmith added Needs: Author Feedback Please give us the requested feedback! and removed Needs: Maintainer Attention Maintainer attention needed! labels Mar 28, 2023
@andyleejordan
Copy link
Member

So this looks eerily similar to issues reported with the Python extension here microsoft/vscode-python#17491 and upstream here microsoft/vscode#131022. The only extension dependency we have is the built-in "powershell" extension (that just installs a basic grammar, and is part of VS Code). I'd like to follow their guess about corrupted downloads in VS Code's user data folder.

So a way to test this would be to open Code from the command line with a flag like this: code --user-data-dir <some random test folder> so that Code opens with a fresh (and empty) user data directory.

@alexanderarnst
Copy link
Author

alexanderarnst commented Mar 29, 2023 via email

@ghost ghost added Needs: Maintainer Attention Maintainer attention needed! and removed Needs: Author Feedback Please give us the requested feedback! labels Mar 29, 2023
@alexanderarnst
Copy link
Author

alexanderarnst commented Mar 29, 2023 via email

@andyleejordan
Copy link
Member

Ahh, interesting. I'm sorry about that! I can't think of a good workaround other than contacting your IT department and explaining you need to download VSIX packages as part of your workflow.

@dramerus
Copy link

I ran into two issues here:

The only way this worked for me was using both the powershell-2023.3.2.vsix and bypassing the existing user data folder as @andschwa suggested.

Assuming the issue is in my VS Code User Data folder, does this mean I will have to download all my extensions again to a fresh folder?

@andyleejordan
Copy link
Member

@dramerus if you're at least able to download the VSIX, then I think your issue is just a corrupted download in your existing user data folder. I'm...not sure how to fix that. Theoretically you could clear VS Code's cache? I'd try checking its user data folder for anything mentioning "extensions," deleting them, and then reinstalling them (you could be extra careful and just try to delete the PowerShell extensions). Hope that works! Fortunately it's not a huge deal to re-download extensions, as their settings are saved separately (in your user settings.json file).

@SydneyhSmith SydneyhSmith added Needs: Repro Info 🤔 and removed Needs: Maintainer Attention Maintainer attention needed! labels Apr 5, 2023
@MarkoCharqueno
Copy link

I was able to work around this issue by deleting the following folders .
C:\Users\UserName\AppData\Roaming\Code\CachedExtensionVSIXs
C:\Users\UserName\AppData\Roaming\Code\CachedData

Attempting to download and install the VSIX directly produced the same error, so I assume vscode ignores the download if there is already a VSIX cached.

@JamesAMartin
Copy link

I am building out a new system, clean install of everything, and am running into the same issues with trying to install the PowerShell module in VSCode. Trying all of the suggestions above, I am continually getting the "Corupt ZIP: end of central directory record signature not found" error.

I am able to download the VSIX clean (I think) but even the manual install of it does not work, even after uninstalling all other extensions (Git Graph was the only other installed so far) and deleting anything that looked like cache in the AppData\Roaming\Code folder. Even starting with code --user-data-dir <some random test folder> made no difference.

On my old system, about a month ago I noticed the PowerShell extension needed an update, and I have not been able to get it to install on that system either. I was expecting a clean install to work, but is seems to be something with VSCode or the PowerShell extension file.

Any help would be seriously appreciated.

@andyleejordan
Copy link
Member

Can you verify the contents of the VSIX? You can view the size it ought to be here: https://github.com/PowerShell/vscode-powershell/releases/tag/v2023.3.3

Seems like this issue is mostly related to firewalls causing the VSIX not do download fully.

@JamesAMartin
Copy link

andschwa,

You are spot on with your suggestion. I should have checked file size on the download, but as everything appeared to work properly, I did not suspect an issue. It turns out that our firewalls were updated to protect against a vulnerability from a few months ago, and that has not been lifted yet. It specifically targeted the PowerShell VSIX, but the firewalls were not updated after the vulnerability was fixed. I've got network guys looking at it now.

Why the firewalls would allow any part of the file to download and not throw an exception to the user is a different question...

Thanks for the quick and excellent assistance!

@andyleejordan
Copy link
Member

And I sure am curious why they specifically blocked the PowerShell VSIX...I don't have any reports about vulnerabilities.

@JamesAMartin
Copy link

I have gotten a little more detail from our network guys...

We are using Palo Alto firewalls, and it appears they setup the initial restriction to help protect our systems. Details of the vulnerability can be found at GHSA-pw56-c55x-cm9m.

Summary is below:
image

@andyleejordan
Copy link
Member

Oh, I see. So it's a blanket ban on allowing VS Code to download VSIXs (meaning it breaks ours and all other non-built-in extensions). Fortunately, according to that CVE it was patched back in October 2022. As long as your VS Code version v1.73.1 or above it's no longer a threat. Since VS Code auto-updates, and you're likely already on the latest (1.77.3), your IT team can probably be convinced to allow VSIX downloads again (and thus allow marketplace extensions to be installed).

Affected versions
v1.4.0 - v1.71.1
Patched versions
v1.73.1

The only thing I don't get is why they blocked VSIX downloads...like, it doesn't have anything to do with the CVE as far as I can tell. That vulnerability existed in VS Code's built-in Jypiter Notebook's feature code.

@JamesAMartin
Copy link

The strange thing from my perspective, is that only the PowerShell extension seemed to be affected. All of the others I tried installed with no problem. Hopefully this will help someone else that has been bit by the same issue.

@andyleejordan
Copy link
Member

That's so weird...once upon a time the PowerShell extension shipped some Jypiter Notebook code too, but it was removed over a year ago. Maybe it's just because it contains PowerShell scripts and modules? Palo Alto is being a bit too "helpful" I think.

@MarkoCharqueno
Copy link

I experienced this issue with the C# extension as well, but no other extensions. So not entirely isolated to just the PowerShell extension.

@bolyardwork
Copy link

Same issue here just the powershell extension so far, with vpn off I am good.

@andyleejordan andyleejordan added Resolution-External Will close automatically. and removed Needs: Repro Info 🤔 labels Apr 18, 2023
@ghost
Copy link

ghost commented Apr 18, 2023

This issue has been marked as external. It has been automatically closed for housekeeping purposes.

@afsneto
Copy link

afsneto commented Aug 22, 2023

I've had the same issue with any extension and tried to use downloaded .vsix files. But the vs. code showed "end of central directory record signature not found"!
And that happens with any extension. Could it be a problem with my proxy?

code --version
1.80.1
74f6148eb9ea00507ec113ec51c489d6ffb4b771
x64

@andyleejordan
Copy link
Member

Yes, it is most likely a problem with your proxy.

@afsneto
Copy link

afsneto commented Sep 5, 2023

I was able to work around this issue by deleting the following folders . C:\Users\UserName\AppData\Roaming\Code\CachedExtensionVSIXs C:\Users\UserName\AppData\Roaming\Code\CachedData

Attempting to download and install the VSIX directly produced the same error, so I assume vscode ignores the download if there is already a VSIX cached.

Thank you so much, that worked! Finally, I can update/install extensions!

@Roymprog
Copy link

This was an issue with the proxy on my end as well. Make sure you can connect to all (relevant) domains on this page.

@RacketyWater7
Copy link

thank you soo much guys for the wonderful suggestions

This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Issue-Bug A bug to squash. Resolution-External Will close automatically.
Projects
None yet
Development

No branches or pull requests