On Mon, 2006-06-26 at 07:25 -0600, Stephen John Smoogen wrote: > On 6/25/06, Steve G <linux_4ever@xxxxxxxxx> wrote: > > Hi, > > > > I just wanted everyone to understand the significance of this announcement: > > > > >coreutils-5.96-4 > > >---------------- > > >* Sun Jun 25 2006 Tim Waugh <twaugh@xxxxxxxxxx> 5.96-4 > > >- Include new hashes (bug #196369). Patch from upstream. > > >- Build at -O1 on s390 for the moment (bug #196369). > > > > > > This adds sha224sum, sha256sum, sha384sum, and sha512sum utilities to the > > distribution. Attacks on md5sum have been getting better over the last 2 years. > > While md5sum is not broken, I think its time to consider migrating to sha256sum > > everywhere in the distribution. > > > > Hurray. We have been told that computer systems that are covered by > FISMA are supposed to use a minimum of SHA-256 when doing baselines of > systems. Now to get a baseline tool that uses this AND is prelink > aware. > The RPM maintainer has already expressed displeasure with the idea of replacing SHA-1 with something better, so don't bother wasting your time there. -- Nicholas Miell <nmiell@xxxxxxxxxxx> -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list