Bug#223772: general: no md5sums for many packages (e.g. bc)

[werner . thoeni]

goswin,

> [EMAIL PROTECTED] writes:
>
> > Subject: general: no md5sums for many packages (e.g. bc)
> > Package: general
> > Version: N/A; reported 2003-12-12
> > Severity: normal
> > Tags: security
>
> Every package has a md5sum in the Package file.

the answer is not correct. pls see as an example the package bc with version 1.06-8 or bzip2 version 1.0.2-1, ....

>
> Some packages have a useless and space wasting md5sums file inside the
> package. Due to its uselessness the existance is rather a bug than its
> omission.

i don't understand your comment above. why is the md5sums file useless and space wasting especially in terms of security? until now, I was of the opinion, that the md5sum gives me the guarantee that a debian package is not penetrated before installation and further - after having the packages installed on a machine - the md5sum files give me the confidence that the debian binaries are correct and consistent.

>
> Please close this bug, read the threads on debian-devel about this and
> if you still want md5sum files help making actually usefull ones.
>
> MfG
>         Goswin

expecting your answer.

Mit freundlichen Grüßen / Best regards
Dipl.-Ing. Werner THÖNI

Allgemeines Rechenzentrum GmbH
Technischer Bereich
Leiter Systemgruppe UNIX

A-6020 Innsbruck, Tschamlerstraße 2
Tel.: +43 / (0)50400-0
Fax: +43 / (0)50400-1382
e-Mail: [EMAIL PROTECTED]
http://www.arz.co.at