touch-packages team mailing list archive

Thread
Date

[Bug 1098738] Re: apt-get source only checks md5 hashes in Sources files

To: touch-packages@xxxxxxxxxxxxxxxxxxx
From: Julian Andres Klode <juliank@xxxxxxxxxx>
Date: Wed, 12 Aug 2015 12:21:45 -0000
Reply-to: Bug 1098738 <1098738@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

This should be fixed in recent versions.

** Changed in: apt (Ubuntu)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1098738

Title:
  apt-get source only checks md5 hashes in Sources files

Status in apt package in Ubuntu:
  Fix Released

Bug description:
  'apt-get source' only validates the md5 hash in the Sources file.
  Ideally, it should check the sha hashes also.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1098738/+subscriptions