On Thursday, April 18, 2024 at 11:05:52 PM UTC-7 Georgi Guninski wrote: The only sage change I see after the xz drama [....]
Well, here's one, waiting for review: https://github.com/sagemath/sage/pull/37726 (prepared by @faisalfakhro; I reviewed and made some minor changes) updates the cryptographic hashes used by the Sage distribution for authenticating the downloaded tarballs to use the secure hash sha256 instead of sha1 because of the known insecurity of sha1. -- You received this message because you are subscribed to the Google Groups "sage-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to sage-devel+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/sage-devel/18a5d0e2-6639-49a9-a53e-d7e498349571n%40googlegroups.com.
