On Tue 2020-10-27 07:52:16 +0100, Konstantinos Dalamagkidis wrote:
> currently dpkg-sig uses MD5/SHA1 for the digest. Both are insufficient
> for integrity protection and according to the Debian Wiki SHA-1 is being
> phased out.
This is really not acceptable. It's 2021, we've known that both MD5
Package: dpkg-sig
Version: 0.13.1+nmu4
Severity: important
Dear Maintainer,
currently dpkg-sig uses MD5/SHA1 for the digest. Both are insufficient
for integrity protection and according to the Debian Wiki SHA-1 is being
phased out.
We would like to continue using dpkg-sig and would contribute to
2 matches
Mail list logo
