X2Go Bug report logs - #54
Missing signatures for downloads

version graph

Package: x2goclient; Maintainer for x2goclient is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goclient is src:x2goclient.

Reported by: "glpk xypron" <xypron.glpk@gmx.de>

Date: Fri, 26 Oct 2012 12:03:02 UTC

Severity: normal

Found in version 3.99.2.1

Done: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

Bug is archived. No further changes may be made.

Full log

Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

Received: (at submit) by bugs.x2go.org; 26 Oct 2012 12:00:54 +0000
From xypron.glpk@gmx.de  Fri Oct 26 14:00:54 2012
Received: from mailout-de.gmx.net (mailout-de.gmx.net [213.165.64.23])
	by ymir (Postfix) with SMTP id 109175DB0A
	for <submit@bugs.x2go.org>; Fri, 26 Oct 2012 14:00:54 +0200 (CEST)
Received: (qmail 10198 invoked by uid 0); 26 Oct 2012 12:00:53 -0000
Received: from 212.64.228.100 by www026.gmx.net with HTTP;
 Fri, 26 Oct 2012 14:00:51 +0200 (CEST)
Content-Type: text/plain; charset="utf-8"
Date: Fri, 26 Oct 2012 14:00:52 +0200
From: "glpk xypron" <xypron.glpk@gmx.de>
Message-ID: <20121026120052.198450@gmx.net>
MIME-Version: 1.0
Subject: Missing signatures for downloads
To: submit@bugs.x2go.org
X-Authenticated: #41704822
X-Flags: 0001
X-Mailer: WWW-Mail 6100 (Global Message Exchange)
X-Priority: 3
X-Provags-ID: V01U2FsdGVkX1+8xl4oLuS8El9qH3847imr+nzxNZlkaTTWhddOi9
 gKnqpTfK2AX8eekeq0enwCbFSCG/tkg/l49A== 
Content-Transfer-Encoding: 8bit
X-GMX-UID: Ix74cOEseSEqMhc+F3YhAgR+IGRvb8CC

Package: x2goclient
Version: 3.99.2.1

Dear maintainer,

you offer downloads for the x2go client, e.g. on page
http://code.x2go.org/releases/binary-win32/x2goclient

Unfortunately you do not provide any possibility to verify if a downloaded file is authentic, or if during transfer a virus has been added.

Please, provide for each download a GPG signature and optionally SHA1 and MD5 hashs.

http://maven.apache.org/download.html
is a good examples except for the missing SHA1 hash. MD5 alone is not safe anymore.

Best regards

Heinrich Schuchardt

Send a report that this bug log contains spam.

X2Go Developers <owner@bugs.x2go.org>. Last modified: Mon May 19 08:20:01 2025; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.