[
https://issues.apache.org/jira/browse/SVN-4673?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Bryan Rosander updated SVN-4673:
--------------------------------
Description:
Google recently created two pdfs with the same sha-1 checksum [1]. There are
reports of this breaking svn repositories[2][3].
[1] https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html
[2]
https://arstechnica.com/security/2017/02/watershed-sha1-collision-just-broke-the-webkit-repository-others-may-follow/
[3] https://lists.webkit.org/pipermail/webkit-dev/2017-February/028795.html
Additional resources:
[https://bugs.webkit.org/show_bug.cgi?id=168774#c23<Paste>]
https://shattered.io/
was:
Google recently created two pdfs with the same sha-1 checksum [1]. There are
reports of this breaking svn repositories[2][3].
[1] https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html
[2]
https://arstechnica.com/security/2017/02/watershed-sha1-collision-just-broke-the-webkit-repository-others-may-follow/
[3] https://lists.webkit.org/pipermail/webkit-dev/2017-February/028795.html
Additional resources:
]https://bugs.webkit.org/show_bug.cgi?id=168774#c23<Paste>]
https://shattered.io/
> Reports of SHA-1 collision causing repository breakage
> ------------------------------------------------------
>
> Key: SVN-4673
> URL: https://issues.apache.org/jira/browse/SVN-4673
> Project: Subversion
> Issue Type: Bug
> Reporter: Bryan Rosander
> Priority: Critical
>
> Google recently created two pdfs with the same sha-1 checksum [1]. There are
> reports of this breaking svn repositories[2][3].
> [1]
> https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html
> [2]
> https://arstechnica.com/security/2017/02/watershed-sha1-collision-just-broke-the-webkit-repository-others-may-follow/
> [3] https://lists.webkit.org/pipermail/webkit-dev/2017-February/028795.html
> Additional resources:
> [https://bugs.webkit.org/show_bug.cgi?id=168774#c23<Paste>]
> https://shattered.io/
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
