[Bug 1078697] Re: Ubuntu archive is missing SHA-1/SHA-256 hashes for some packages

William Grant me at williamgrant.id.au
Fri Jan 11 23:22:20 UTC 2013


This needs fixing in apt-ftparchive before Launchpad can do anything.

Also, MD5 collisions aren't hugely concerning here. It's a preimage that
would be more of a problem, and there's no serious preimage attack known
on MD5 today. I agree that this isn't a good situation, but it's not
"everything is broken with a few hours of computation" bad.

** Also affects: apt (Ubuntu)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1078697

Title:
  Ubuntu archive is missing SHA-1/SHA-256 hashes for some packages

To manage notifications about this bug go to:
https://bugs.launchpad.net/launchpad/+bug/1078697/+subscriptions



More information about the ubuntu-archive mailing list