Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 902379 - salfter: obsolete hashes used in Manifest
Summary: salfter: obsolete hashes used in Manifest
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Overlays (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Scott Alfter
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 902221
  Show dependency tree
 
Reported: 2023-03-20 06:22 UTC by Michał Górny
Modified: 2023-08-17 02:16 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2023-03-20 06:22:22 UTC 
The Manifest files in this repository are using obsolete hashes RMD160 or WHIRLPOOL.  Please update to newer Manifest hashes to avoid problems with newer package managers.  For more information, see the tracker blocked by this bug.
Comment 1 Scott Alfter 2023-07-27 01:43:02 UTC 
In metadata/layout.conf, manifest-hashes was changed to "BLAKE2B SHA512" a couple of months ago.  i've scanned the repository for RMD160 and WHIRLPOOL hashes and found none.

As recommended, I've gone ahead and commented out the manifest-hashes setting and rebuilt the manifests...ended up with no changes, according to git.  My repo should be good to go.