https://bz.apache.org/bugzilla/show_bug.cgi?id=62821

            Bug ID: 62821
           Summary: Use SHA-512 checksums instead of MD5 to verify jar
                    downloads
           Product: JMeter
           Version: 5.0
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Main
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: JMETER_5.1

MD5 is considered broken, so we should verify downloaded artefacts for our
build process with a non broken checksum. SHA-512 is considered safe -- at the
moment.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to