Bug #3653
apt repository unusable with apt 1.2.7, because of weak hash
0%
Description
Hi,
i just noticed, I'm not able to update index files from repository
vdr:/etc/apt# apt update
Hit:1 http://ftp.cz.debian.org/debian sid InRelease
Hit:2 http://ftp.cz.debian.org/debian experimental InRelease
Ign:3 https://dl.bintray.com/tvheadend/deb jessie InRelease
Get:4 https://dl.bintray.com/tvheadend/deb jessie Release [6,489 B]
Hit:4 https://dl.bintray.com/tvheadend/deb jessie Release
Reading package lists... Done
W: Failed to fetch https://dl.bintray.com/tvheadend/deb/dists/jessie/Release No Hash entry in Release file /var/lib/apt/lists/dl.bintray.com_tvheadend_deb_dists_jessie_Release, which is considered strong enough for security purposes
E: Some index files failed to download. They have been ignored, or old ones used instead.
and indeed
curl -v https://dl.bintray.com/tvheadend/deb/dists/jessie/Release
show, that there is no other md5 and sha1 hashes.
So repo is unusable in Debian unstable Sid and will be unusable in Ubuntu Xenial 16x
Your repository is one o many affected.
Thanks for your work!
--
Zito
History
Updated by Václav Ovsík over 8 years ago
Hi,
today I did apt upgrade on my box and tvheadend was upgraded :)
I tried curl and yes - there is now sha256 hash.
The bug can be closed.
Thanks!
--
Zito