Univention Bugzilla – Bug 44839
Provide stronger hashes for downloadable images of UCS
Last modified: 2020-07-03 20:51:20 CEST
Feedback via Ticket#2017062121000183. With UCS 4.2-1 we still use MD5 hashes for check of download integrity. MD5, SHA-0 and SHA1 are all vulnerable to collision attacks. We should consider using SHA256 and replace the MD5 hashes on our ISO image download files and for the appliance images.
This issue has been filed against UCS 4.2. UCS 4.2 is out of maintenance and many UCS components have changed in later releases. Thus, this issue is now being closed. If this issue still occurs in newer UCS versions, please use "Clone this bug" or reopen it and update the UCS version. In this case please provide detailed information on how this issue is affecting you.