FS#51713 - [binutils] Missing checksum and validpgpkeys

Attached to Project: Arch Linux
Opened by Luke (Gaming4JC) - Sunday, 06 November 2016, 02:48 GMT
Last edited by Doug Newgard (Scimmia) - Sunday, 06 November 2016, 05:06 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To No-one
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
The official binutil's package is signed upstream by the maintainer, however we are using git (without HTTPS). Unless there is a requirement for git, we can use SHA512 checksums and the official GPG signature for better integrity checking of the core binutils.


Additional info:

- SHA512 Checksums:
https://mirrors.kernel.org/sourceware/binutils/releases/sha512.sum

Latest source tarballs and .sig
https://ftp.gnu.org/gnu/binutils/
This task depends upon

Closed by  Doug Newgard (Scimmia)
Sunday, 06 November 2016, 05:06 GMT
Reason for closing:  Duplicate
Additional comments about closing:   FS#49979 

Loading...