Karna@lemmy.ml to Linux@lemmy.ml · 9 months agoOh Snap! Canonical now doing manual reviews for new packages due to scam appswww.gamingonlinux.comexternal-linkmessage-square133fedilinkarrow-up1425arrow-down114
arrow-up1411arrow-down1external-linkOh Snap! Canonical now doing manual reviews for new packages due to scam appswww.gamingonlinux.comKarna@lemmy.ml to Linux@lemmy.ml · 9 months agomessage-square133fedilink
minus-squarePantherina@feddit.delinkfedilinkarrow-up5arrow-down1·edit-29 months agoCough Fedora does that (using rpm-sequoia written in Rust) and also uses zst instead of xz for RPMs since Fedora 31
minus-squarevanderbilt@lemmy.worldlinkfedilinkEnglisharrow-up3·9 months agoDid they ever make good on this plan? RPM must accept SHA-1 hashes and DSA keys for Fedora 38, ideally with a deprecation warning that it will be disabled in F39.
Cough Fedora does that (using rpm-sequoia written in Rust) and also uses zst instead of xz for RPMs since Fedora 31
Did they ever make good on this plan?