admin/brew
1
0
Fork 0
Code Issues Packages Projects Releases 6 Wiki Activity

stop supporting md5 checksum

Browse Source 
This prevents a downgrade attack.

Closes Homebrew/homebrew#38433.

Signed-off-by: Xu Cheng <xucheng@me.com>
This commit is contained in:
Xu Cheng 2015-04-07 22:01:59 +08:00
parent 631742c527
commit c9e45b9c26
1 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
Library/Homebrew/compat/md5.rb
View File

@ -18,11 +18,9 @@ end
class Pathname class Pathname
def md5 def md5
require 'digest/md5' odie <<-EOS.undent
opoo <<-EOS.undent MD5 support has been dropped for security reasons.
MD5 support is deprecated and will be removed in a future version. Please switch this formula to SHA256.
Please switch this formula to #{Checksum::TYPES.map { |t| t.to_s.upcase } * ' or '}.
EOS EOS
incremental_hash(Digest::MD5)
end end
end end