Search This Blog

Saturday, December 18, 2010

[SECURITY] [DSA 2134-1] Upcoming changes in advisory format

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
Debian Security Advisory DSA-2134-1 security@debian.org
http://www.debian.org/security/ Moritz Muehlenhoff
December 18th, 2010 http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Traditionally Debian security advisories have included MD5 check sums
of the updated packages. This was introduced at a time when apt didn't
exist yet and BIND was at version 4.

Since apt cryptographically enforces the integrity of the archive for
quite some time now, we've decided to finally drop the hash values
from our advisory mails.

We'll also change some details of the advisory format in the upcoming
months.

- ------------------------------------------------------------------------
Mailing list: debian-security-announce@lists.debian.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAk0Mo1kACgkQXm3vHE4uylpxKACdHsVFanC9O1M178YIV6Tt1u2a
fWMAn2k8Pt43WVy/jIhpSRteit+Qsn42
=7q8T
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: http://lists.debian.org/20101218120807.GA2987@galadriel.inutil.org

No comments: