Package: ftp.debian.org Severity: important http://ftp.debian.org/debian/dists/sarge/main/installer-i386/current/images/ contains images used during installation of sarge, whose MD5 sums aren't signed. There's no way to verify the files you download are released by the Debian project, and not the result of a man-in-the-middle attack.
-- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (500, 'testing'), (1, 'experimental') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.17-1-amd64-k8 Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

