[Bug 1100295] Re: MD5 is insecure, add modern hashing

[Nikita Yerenkov-Scott]

APT does provide the SHA256SUM for packages as can be seen by using
"apt-cache policy" to view information on a package. So can't debsums
get the information this way?

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to dpkg in Ubuntu.
https://bugs.launchpad.net/bugs/1100295

Title:
  MD5 is insecure, add modern hashing

Status in debsums package in Ubuntu:
  Confirmed
Status in dpkg package in Ubuntu:
  Confirmed

Bug description:
  MD5 is insecure due to hash collisions.

  Add more modern and reliable hashing algorithms such as SHA-1, SHA-2
  or SHA-3.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/debsums/+bug/1100295/+subscriptions