Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#54007 - [xz] PKGBUILD not using HTTPS for sources and using weak hash
Attached to Project:
Arch Linux
Opened by Luke (Gaming4JC) - Thursday, 11 May 2017, 02:04 GMT
Last edited by Doug Newgard (Scimmia) - Thursday, 11 May 2017, 02:49 GMT
Opened by Luke (Gaming4JC) - Thursday, 11 May 2017, 02:04 GMT
Last edited by Doug Newgard (Scimmia) - Thursday, 11 May 2017, 02:49 GMT
|
DetailsDescription: I noticed this package is not using HTTPS and using weak MD5 (which is considered broken since 2004).
Attached is a fixed version of the PKGBUILD to resolve these issues. |
This task depends upon
Closed by Doug Newgard (Scimmia)
Thursday, 11 May 2017, 02:49 GMT
Reason for closing: Not a bug
Additional comments about closing: http redirects, and nobody cares about the checksum, especially when it uses pgp.
Thursday, 11 May 2017, 02:49 GMT
Reason for closing: Not a bug
Additional comments about closing: http redirects, and nobody cares about the checksum, especially when it uses pgp.
PKGBUILD