Processed: Re: Bug#818604: Relies on MD5SUM and SHA1SUM to download d-i images in a trustful way

2016-03-25 Thread Debian Bug Tracking System
Processing control commands: > tags -1 +patch +pending Bug #818604 [win32-loader] Relies on MD5SUM and SHA1SUM to download d-i images in a trustful way Added tag(s) patch. Bug #818604 [win32-loader] Relies on MD5SUM and SHA1SUM to download d-i images in a trustful way Added tag(s) pending. --

Bug#818604: Relies on MD5SUM and SHA1SUM to download d-i images in a trustful way

2016-03-20 Thread Didier 'OdyX' Raboud
Le vendredi, 18 mars 2016, 18.43:41 Didier 'OdyX' Raboud a écrit : > C) Get coreutils build a hashsums-win32 package containing cross- >compiled win32 executables (as we're doing for gpgv-win32 and cpio- >win32). It could also provide these files through byhand, to allow >users to check

Processed: Re: Bug#818604: Relies on MD5SUM and SHA1SUM to download d-i images in a trustful way

2016-03-19 Thread Debian Bug Tracking System
Processing control commands: > tags -1 +help Bug #818604 [win32-loader] Relies on MD5SUM and SHA1SUM to download d-i images in a trustful way Added tag(s) help. -- 818604: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=818604 Debian Bug Tracking System Contact ow...@bugs.debian.org with probl

Bug#818604: Relies on MD5SUM and SHA1SUM to download d-i images in a trustful way

2016-03-19 Thread Stephen Kitt
Hi Didier, On Fri, Mar 18, 2016 at 06:43:41PM +0100, Didier 'OdyX' Raboud wrote: > Le vendredi, 18 mars 2016, 16.25:10 Didier 'OdyX' Raboud a écrit : > > win32-loader (its standalone version, available from debian/tools/ ) > > currently relies exclusively on MD5 and SHA1 to trustfully download > >

Bug#818604: Relies on MD5SUM and SHA1SUM to download d-i images in a trustful way

2016-03-19 Thread Didier 'OdyX' Raboud
Package: win32-loader Version: 0.7.14 Severity: important Tags: d-i Control: blocks 818463 by -1 win32-loader (its standalone version, available from debian/tools/ ) currently relies exclusively on MD5 and SHA1 to trustfully download the d-i images.

Bug#818604: Relies on MD5SUM and SHA1SUM to download d-i images in a trustful way

2016-03-19 Thread Didier 'OdyX' Raboud
Control: tags -1 +help Le vendredi, 18 mars 2016, 16.25:10 Didier 'OdyX' Raboud a écrit : > win32-loader (its standalone version, available from debian/tools/ ) > currently relies exclusively on MD5 and SHA1 to trustfully download > the d-i images. After some more checking, this doesn't appear to