Bug#223772: general: no md5sums for many packages (e.g. bc)
goswin,
> werner.thoeni@arz.co.at writes:
>
> > Subject: general: no md5sums for many packages (e.g. bc)
> > Package: general
> > Version: N/A; reported 2003-12-12
> > Severity: normal
> > Tags: security
>
> Every package has a md5sum in the Package file.
the answer is not correct. pls see as an
example the package bc with version 1.06-8 or bzip2 version 1.0.2-1, ....
>
> Some packages have a useless and space wasting md5sums file inside
the
> package. Due to its uselessness the existance is rather a bug than
its
> omission.
i don't understand your comment above. why
is the md5sums file useless and space wasting especially in terms of security?
until now, I was of the opinion, that the md5sum gives me the guarantee
that a debian package is not penetrated before installation and further
- after having the packages installed on a machine - the md5sum files give
me the confidence that the debian binaries are correct and consistent.
>
> Please close this bug, read the threads on debian-devel about this
and
> if you still want md5sum files help making actually usefull ones.
>
> MfG
> Goswin
expecting your answer.
Mit freundlichen Grüßen / Best regards
Dipl.-Ing. Werner THÖNI
Allgemeines Rechenzentrum GmbH
Technischer Bereich
Leiter Systemgruppe UNIX
A-6020 Innsbruck, Tschamlerstraße 2
Tel.: +43 / (0)50400-0
Fax: +43 / (0)50400-1382
e-Mail: Werner.Thoeni@arz.co.at
http://www.arz.co.at
Reply to: