Hosting Provided By

Re: debsums: no md5sums for a lot of important packages on sarge

From: Romain Francoise <rfrancoise(at)debian.org>
Date: Mon Oct 08 2007 - 08:21:18 EDT

"Alexandros Papadopoulos" <apapadop@alumni.cmu.edu> writes:

> My question is, is it acceptable to have so many important and
> widely used packages in *stable* without MD5 checksums?

MD5 checksums aren't mandatory, so quite a few packages don't have them. We hope to change this for future releases, but the number of affected packages is still too important to make it a release goal. See the following page for up-to-date statistics:

http://people.debian.org/~rfrancoise/md5sums-check/

(They apply to sid, not etch.)

I set this up back in August:

http://blog.orebokech.com/2007/08/debian-packages-without-md5sums.html http://lists.debian.org/debian-devel/2007/08/msg00708.html

Cheers,

-- 
  ,''`.
 : :' :        Romain Francoise 
 `. `'         
http://people.debian.org/~rfrancoise/
   `-


-- 
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Received on Mon Oct 8 08:22:29 2007

Do you need help?

This message: [ Message body ]
Next message: Mike Bird: "Re: [SECURITY] [DSA 1381-1] New Linux 2.6.18 packages fix several vulnerabilities"
Previous message: Michael Ablassmeier: "Re: debsums: no md5sums for a lot of important packages on sarge"
In reply to: Alexandros Papadopoulos: "debsums: no md5sums for a lot of important packages on sarge"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Mar 19 2008 - 06:54:10 EDT