Bug#820910: apt no longer verifies repositories using sha1 hash

2017-11-30 Thread Ben Longbons
Package: apt Version: 1.4.8 Followup-For: Bug #820910 Dear Maintainer, This also affects pulling old stuff from snapshots.debian.org ... which is a lot more useful when you can put `[check-valid-until=no]` in sources.list, which is only in recent apt. -- Package-specific info: -- (no

Bug#820910: apt no longer verifies repositories using sha1 hash

2016-04-13 Thread Julian Andres Klode
Control: severity -1 wishlist On Wed, Apr 13, 2016 at 05:27:21PM +0200, Michal Suchanek wrote: > Package: apt > Version: 1.2.10 > Severity: important > > Hello, > > I tried to install a compiler from emdebian because there is no > corresponding version in debian main archives and > > - apt

Bug#820910: apt no longer verifies repositories using sha1 hash

2016-04-13 Thread Michal Suchanek
Package: apt Version: 1.2.10 Severity: important Hello, I tried to install a compiler from emdebian because there is no corresponding version in debian main archives and - apt warns that the source uses SHA1 hash - the package is shown as untrusted Since no exploit is known for sha1 apt (and