On Thu, 27 Apr 2006 12:50:02 +0200 Marien Zwart <[EMAIL PROTECTED]> wrote: | We (portage project) are fixing known broken Manifests/digests. If you | come across any broken SHA256 digests feel free to fix them though: | the package is basically unusable with ~arch portage until it is | fixed, and fixing it twice does not really hurt :)
If you're looking to avoid downloading too much... All source tarballs whose file size (mod 64) is 55 are the ones affected, which would suggest that somewhere very roughly in the region of one package in sixty four with SHA256 digests is h0rked. There's a good testsuite which would have caught this at [1]. [1]: http://csrc.nist.gov/cryptval/shs.htm -- Ciaran McCreesh Mail : ciaran dot mccreesh at blueyonder.co.uk -- gentoo-dev@gentoo.org mailing list
