Add hashes for Translation-$lang into the Release file

Bug #1313576 reported by Michael Vogt
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
High
Chris Johnston

Bug Description

The ubuntu archive Release file (e.g. http://archive.ubuntu.com/ubuntu/dists/trusty/Release) does not contain hashes/filesizes for the Translation-$lang files. Unlinke ftp://ftp.de.debian.org/debian/dists/sid/InRelease where this information is available.

It could be argued that there is a small security risk here is well as a MITM could change descriptions.

The other benefit is that soon apt update should make use of the size information to provide a better estimate for the remaining download time.

Tags: qa-ok

Related branches

Revision history for this message
William Grant (wgrant) wrote :

We already index them in i18n/Index, and add that to Release. precise's apt relies on that deprecated index, so we probably need to keep it for <= trusty. We also need to check if tools like debmirror will cope with i18n/Index's absence, but we can probably drop it from utopic onwards.

Some history:
 https://bugs.launchpad.net/launchpad/+bug/572128
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=649314
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=644609

Changed in launchpad:
importance: Undecided → High
status: New → Triaged
summary: - Pleasse add hashes for Translation-$lang into the Release file
+ Add hashes for Translation-$lang into the Release file
Revision history for this message
Launchpad QA Bot (lpqabot) wrote :
Changed in launchpad:
assignee: nobody → Chris Johnston (cjohnston)
tags: added: qa-needstesting
Changed in launchpad:
status: Triaged → Fix Committed
William Grant (wgrant)
tags: added: qa-ok
removed: qa-needstesting
William Grant (wgrant)
Changed in launchpad:
status: Fix Committed → Fix Released
Revision history for this message
Michael Vogt (mvo) wrote :

Thanks a lot William for fixing this issue! I just noticed that this needs a additional tiny fix to include the uncompressed hashes as well. I pushed lp:~mvo/launchpad/lp1313576-uncompressed that hopefully fixes this.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.