[Bug 1100295] Re: MD5 is insecure, add modern hashing

Nikita Yerenkov-Scott 1100295 at bugs.launchpad.net
Fri Sep 2 20:58:23 UTC 2016


I don't see an issue with users requesting debsums to support SHA-256 as
well as MD5. Also, why are you marking the issue in dpkg as "Won't Fix"?
it is an important thing to be fixed in dpkg, they shouldn't still be
using MD5.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to dpkg in Ubuntu.
https://bugs.launchpad.net/bugs/1100295

Title:
  MD5 is insecure, add modern hashing

Status in Ubuntu GNOME:
  Invalid
Status in debsums package in Ubuntu:
  Won't Fix
Status in dpkg package in Ubuntu:
  Won't Fix

Bug description:
  MD5 is insecure due to hash collisions.

  Add more modern and reliable hashing algorithms such as SHA-256 or
  SHA-512.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-gnome/+bug/1100295/+subscriptions



More information about the foundations-bugs mailing list