Send CentOS-announce mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
[email protected]
You can reach the person managing the list at
[email protected]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."
Today's Topics:
1. CEBA-2011:1535 CentOS 5 i386 sos Update (Johnny Hughes)
2. CEBA-2011:1535 CentOS 5 x86_64 sos Update (Johnny Hughes)
3. Using sha256sum instead of md5sum for package checksums
(Johnny Hughes)
----------------------------------------------------------------------
Message: 1
Date: Mon, 12 Dec 2011 11:24:24 +0000
From: Johnny Hughes <[email protected]>
Subject: [CentOS-announce] CEBA-2011:1535 CentOS 5 i386 sos Update
To: [email protected]
Message-ID: <[email protected]>
Content-Type: text/plain; charset=us-ascii
CentOS Errata and Bugfix Advisory 2011:1535
Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-1535.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( md5sum Filename )
i386:
95167d3a8c507005d52afef139d3eebc sos-1.7-9.54.el5_7.1.noarch.rpm
Source:
41f32c5c29d3ce6e241802730cd663b6 sos-1.7-9.54.el5_7.1.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #[email protected]
------------------------------
Message: 2
Date: Mon, 12 Dec 2011 11:24:24 +0000
From: Johnny Hughes <[email protected]>
Subject: [CentOS-announce] CEBA-2011:1535 CentOS 5 x86_64 sos Update
To: [email protected]
Message-ID: <[email protected]>
Content-Type: text/plain; charset=us-ascii
CentOS Errata and Bugfix Advisory 2011:1535
Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-1535.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( md5sum Filename )
x86_64:
95167d3a8c507005d52afef139d3eebc sos-1.7-9.54.el5_7.1.noarch.rpm
Source:
41f32c5c29d3ce6e241802730cd663b6 sos-1.7-9.54.el5_7.1.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #[email protected]
------------------------------
Message: 3
Date: Mon, 12 Dec 2011 06:39:04 -0600
From: Johnny Hughes <[email protected]>
Subject: [CentOS-announce] Using sha256sum instead of md5sum for
package checksums
To: CentOS-Announce <[email protected]>
Message-ID: <[email protected]>
Content-Type: text/plain; charset="iso-8859-1"
There are known Collision Attacks for the MD5SUM method of hashing, so
it is possible to modify a file and make it have the same MD5SUM as
another file. See this link for details on Collision Attacks:
http://en.wikipedia.org/wiki/Collision_attack
Recommendation from the US-CERT concerning MD5SUM hashes:
http://www.kb.cert.org/vuls/id/836068
Based on the above information, the CentOS team will be using sha256sum
(sha-2) and not md5sum to generate future hashes for posting on our
e-mail announcements to the CentOS Announce Mailing List.
Thanks,
Johnny Hughes
The CentOS Project
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
Url :
http://lists.centos.org/pipermail/centos-announce/attachments/20111212/2d12f149/attachment-0001.bin
------------------------------
_______________________________________________
CentOS-announce mailing list
[email protected]
http://lists.centos.org/mailman/listinfo/centos-announce
End of CentOS-announce Digest, Vol 82, Issue 7
**********************************************
_______________________________________________
CentOS mailing list
[email protected]
http://lists.centos.org/mailman/listinfo/centos
