Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 902221 - [TRACKER] Repositories using obsolete hashes
Summary: [TRACKER] Repositories using obsolete hashes
Status: CONFIRMED
Alias: None
Product: Quality Assurance
Classification: Unclassified
Component: Trackers (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Quality Assurance Team
URL: https://archives.gentoo.org/gentoo-de...
Whiteboard:
Keywords: Tracker
Depends on: 902227 902229 902233 902235 902239 902243 902247 902249 902253 902259 902261 902271 902275 902277 902279 902287 902295 902297 902299 902301 902303 902315 902321 902327 902329 902331 902333 902335 902337 902339 902341 902343 902345 902353 902357 902373 902377 902381 902385 902389 902401 902403 902407 902413 902415 902417 902419 902421 902423 902425 902427 902431 902433 902223 902225 902231 902237 902241 902245 902251 902255 902257 902263 902265 902267 902269 902273 902281 902283 902285 902289 902291 902293 902305 902307 902309 902311 902313 902317 902319 902323 902325 902347 902349 902351 902355 902359 902361 902363 902365 902367 902369 902371 902375 902379 902383 902387 902391 902393 902395 902397 902399 902405 902409 902411 902429
Blocks:
  Show dependency tree
 
Reported: 2023-03-20 06:14 UTC by Michał Górny
Modified: 2023-03-28 14:54 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2023-03-20 06:14:17 UTC
This is a tracker for repositories that are still using obsolete hashes in their Manifest files.  Providing these hashes in Portage is already a problem, and it'd be really preferable if the repositories switched to a newer set.  Ideally, they should remove hash override from layout.conf (if any), and remanifest everything (e.g. using `pkgdev manifest`).

The hashes in question right now are: RMD160 WHIRLPOOL
Comment 1 Atoms 2023-03-20 12:29:49 UTC
Hello, manifests are regenerated and old packages removed.
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-03-23 10:03:22 UTC
See also this post on gentoo-dev: https://archives.gentoo.org/gentoo-dev/message/eafaeb6435abce280c47abc30e2dfda4.
Comment 3 Dominik Keil 2023-03-28 14:51:59 UTC
I've created a PR to have my repo removed... the main repo now has a newer version of the only thing that was in there anyway
Comment 4 Dominik Keil 2023-03-28 14:54:21 UTC
(In reply to Dominik Hertel from comment #3)
> I've created a PR to have my repo removed... the main repo now has a newer
> version of the only thing that was in there anyway

sry, wrong ticket :)