Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 902221

Summary: [TRACKER] Repositories using obsolete hashes
Product: Quality Assurance Reporter: Michał Górny <mgorny>
Component: TrackersAssignee: Gentoo Quality Assurance Team <qa>
Status: CONFIRMED ---    
Severity: normal Keywords: Tracker
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
URL: https://archives.gentoo.org/gentoo-dev/message/eafaeb6435abce280c47abc30e2dfda4
See Also: https://bugs.gentoo.org/show_bug.cgi?id=888884
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on: 902227, 902229, 902233, 902235, 902239, 902243, 902247, 902249, 902253, 902259, 902261, 902271, 902275, 902277, 902279, 902287, 902295, 902297, 902299, 902301, 902303, 902315, 902321, 902327, 902329, 902331, 902333, 902335, 902337, 902339, 902341, 902343, 902345, 902353, 902357, 902373, 902377, 902381, 902385, 902389, 902401, 902403, 902407, 902413, 902415, 902417, 902419, 902421, 902423, 902425, 902427, 902431, 902433, 902223, 902225, 902231, 902237, 902241, 902245, 902251, 902255, 902257, 902263, 902265, 902267, 902269, 902273, 902281, 902283, 902285, 902289, 902291, 902293, 902305, 902307, 902309, 902311, 902313, 902317, 902319, 902323, 902325, 902347, 902349, 902351, 902355, 902359, 902361, 902363, 902365, 902367, 902369, 902371, 902375, 902379, 902383, 902387, 902391, 902393, 902395, 902397, 902399, 902405, 902409, 902411, 902429    
Bug Blocks:    

Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2023-03-20 06:14:17 UTC
This is a tracker for repositories that are still using obsolete hashes in their Manifest files.  Providing these hashes in Portage is already a problem, and it'd be really preferable if the repositories switched to a newer set.  Ideally, they should remove hash override from layout.conf (if any), and remanifest everything (e.g. using `pkgdev manifest`).

The hashes in question right now are: RMD160 WHIRLPOOL
Comment 1 Atoms 2023-03-20 12:29:49 UTC
Hello, manifests are regenerated and old packages removed.
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-03-23 10:03:22 UTC
See also this post on gentoo-dev: https://archives.gentoo.org/gentoo-dev/message/eafaeb6435abce280c47abc30e2dfda4.
Comment 3 Dominik Keil 2023-03-28 14:51:59 UTC
I've created a PR to have my repo removed... the main repo now has a newer version of the only thing that was in there anyway
Comment 4 Dominik Keil 2023-03-28 14:54:21 UTC
(In reply to Dominik Hertel from comment #3)
> I've created a PR to have my repo removed... the main repo now has a newer
> version of the only thing that was in there anyway

sry, wrong ticket :)