[Rpm-maint] [rpm-software-management/rpm] Eliminate RPMDBI_SIGMD5 and RPMDBI_SHA1HEADER rpmdb indexes (Issue #2633)

Panu Matilainen notifications at github.com
Mon Aug 28 07:17:34 UTC 2023


As pointed out by @dralley in https://github.com/rpm-software-management/rpm/discussions/2374#discussioncomment-6826927: we support indexed db queries for "pkgid" and "hdrid", which are actually backed by SIGMD5 and SHA1HEADER tags. These aren't really security sensitive because they're just an identifier in this context, but both will be gone in the v6 format, so we need to eliminate these indexes based on obsolete crypto, and if pkgid/hdrid concepts are to be preserved (I don't know anybody using them so dunno), figure out something that doesn't have an expiration date like the crypto functionality nowadays.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/2633
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/2633 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20230828/9bd01dee/attachment.html>


More information about the Rpm-maint mailing list