cloudfoundry/buildpack-packager

Replace md5 by secure hash algorithm like sha256

thardeck opened this issue · 3 comments

Are there any plans to replace the insecure md5 hash algorithm in the packager by a secure one like sha256?

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/151913767

The labels on this github issue will be updated when the story is started.

Hi @thardeck,

Yes, eventually we plan to do this. I'll prioritize this story so you can follow it in our backlog.

@thardeck This is finished. All buildpacks use sha256 checksums on their develop branch.