[Bug 1716550] [NEW] missing strong hashes in some suites of the caffeine-developers PPA

[Paul Wise (Debian)]

Public bug reported:

The Sources files for these deb-src lines from the caffeine-developers
PPA are missing SHA1 and SHA256 checksums for the .dsc file:

deb-src http://ppa.launchpad.net/caffeine-developers/ppa/ubuntu raring main
deb-src http://ppa.launchpad.net/caffeine-developers/ppa/ubuntu oneiric main
deb-src http://ppa.launchpad.net/caffeine-developers/ppa/ubuntu karmic main
deb-src http://ppa.launchpad.net/caffeine-developers/ppa/ubuntu lucid main
deb-src http://ppa.launchpad.net/caffeine-developers/ppa/ubuntu precise main
deb-src http://ppa.launchpad.net/caffeine-developers/ppa/ubuntu natty main
deb-src http://ppa.launchpad.net/caffeine-developers/ppa/ubuntu maverick main
deb-src http://ppa.launchpad.net/caffeine-developers/ppa/ubuntu quantal main

Here is an example of the problem from raring:

Files:
 ced7210fab7ab46247f96e2cee8580f7 161718 caffeine_2.4.1+478~raring1.tar.gz
 a23882611203d1bbbdf8334f96a29469 657 caffeine_2.4.1+478~raring1.dsc
Checksums-Sha1: 299e4f4a7a5ec3bc660be1008114b3f7551e0fe6 161718 caffeine_2.4.1+478~raring1.tar.gz
Checksums-Sha256: 1f17b657cecb66ab2ba397daa12b934760bbc9492cbf3a7d4a7b8a97bde12c1c 161718 caffeine_2.4.1+478~raring1.tar.gz

MD5 is an extremely weak hash and should not be relied on.

I do not know how widespread this issue is, please investigate.

Also, aren't the above suites obsolete?
Shouldn't they be removed from all PPAs?

 affects launchpad
 subscribe ubuntu-archive

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

** Affects: launchpad
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1716550

Title:
  missing strong hashes in some suites of the caffeine-developers PPA

To manage notifications about this bug go to:
https://bugs.launchpad.net/launchpad/+bug/1716550/+subscriptions