Project

General

Profile

Bug #3653

apt repository unusable with apt 1.2.7, because of weak hash

Added by Václav Ovsík over 8 years ago. Updated over 8 years ago.

Status:
Fixed
Priority:
Normal
Assignee:
-
Category:
General
Target version:
-
Start date:
2016-03-22
Due date:
% Done:

0%

Estimated time:
Found in version:
any
Affected Versions:

Description

Hi,
i just noticed, I'm not able to update index files from repository

vdr:/etc/apt# apt update
Hit:1 http://ftp.cz.debian.org/debian sid InRelease
Hit:2 http://ftp.cz.debian.org/debian experimental InRelease
Ign:3 https://dl.bintray.com/tvheadend/deb jessie InRelease
Get:4 https://dl.bintray.com/tvheadend/deb jessie Release [6,489 B]
Hit:4 https://dl.bintray.com/tvheadend/deb jessie Release
Reading package lists... Done
W: Failed to fetch https://dl.bintray.com/tvheadend/deb/dists/jessie/Release No Hash entry in Release file /var/lib/apt/lists/dl.bintray.com_tvheadend_deb_dists_jessie_Release, which is considered strong enough for security purposes
E: Some index files failed to download. They have been ignored, or old ones used instead.

and indeed

curl -v https://dl.bintray.com/tvheadend/deb/dists/jessie/Release

show, that there is no other md5 and sha1 hashes.
So repo is unusable in Debian unstable Sid and will be unusable in Ubuntu Xenial 16x
Your repository is one o many affected.
Thanks for your work!
--
Zito

History

#1

Updated by Václav Ovsík over 8 years ago

Hi,
today I did apt upgrade on my box and tvheadend was upgraded :)
I tried curl and yes - there is now sha256 hash.
The bug can be closed.
Thanks!
--
Zito

#2

Updated by Mark Clarkstone over 8 years ago

  • Status changed from New to Fixed

Marking as fixed then! :)

Also available in: Atom PDF