As pointed out by @dralley in
https://github.com/rpm-software-management/rpm/discussions/2374#discussioncomment-6826927:
we support indexed db queries for "pkgid" and "hdrid", which are actually
backed by SIGMD5 and SHA1HEADER tags. These aren't really security sensitive
because they're just an identifier in this context, but both will be gone in
the v6 format, so we need to eliminate these indexes based on obsolete crypto,
and if pkgid/hdrid concepts are to be preserved (I don't know anybody using
them so dunno), figure out something that doesn't have an expiration date like
the crypto functionality nowadays.
--
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/2633
You are receiving this because you are subscribed to this thread.
Message ID: <rpm-software-management/rpm/issues/2...@github.com>
_______________________________________________
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint
