[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#887830: debian-cd: *.jigdo files should be listed in the *SUMS files

at bottom :-

On 20/01/2018, Thomas Schmitt <scdbackup@gmx.net> wrote:
> Package: debian-cd
> Severity: normal
> Tags: upstream
> Dear Maintainer,
> as described in
>   https://lists.debian.org/debian-cd/2018/01/msg00019.html
> the *.jigdo files are not listed in the checksum files *SUMS.
> There is no way provided to check the authenticity of *.jigdo before
> downloading by jigdo-lite begins.
> The *.jigdo file provides package file paths, the URLs of fallback
> mirrors, and the cheksum of the *.template file. So *.template can
> inflate to an image of arbitrary size and jigdo-lite can be lured into
> downloading arbitrary URLs.
> Have a nice day :)
> Thomas

Drats, we still don't have a +1 in the web interface.

Well, you got my vote for the same as I also use .jigdo from time to time.

          Shirish Agarwal  शिरीष अग्रवाल
  My quotes in this email licensed under CC 3.0
EB80 462B 08E1 A0DE A73A  2C2F 9F3D C7A4 E1C4 D2D8

Reply to: