[
https://issues.apache.org/jira/browse/SOLR-14649?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ishan Chattopadhyaya updated SOLR-14649:
Fix Version/s: 8.7
> Package manager should use SHA512, not SHA1
>
[
https://issues.apache.org/jira/browse/SOLR-14649?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ishan Chattopadhyaya updated SOLR-14649:
Priority: Critical (was: Major)
> Package manager should use SHA512, not SHA1
> --
[
https://issues.apache.org/jira/browse/SOLR-14649?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ishan Chattopadhyaya updated SOLR-14649:
Description: Due to a massive oversight, we only support SHA1 based package
signing
[
https://issues.apache.org/jira/browse/SOLR-14649?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ishan Chattopadhyaya updated SOLR-14649:
Security: Public (was: Private (Security Issue))
> Package manager should use SHA5