Skip to content

iso .DIGESTS file contains absolute paths #48

Description

@ccxcz

The checksum file contains absolute paths, such as:

# BLAKE2 (b2sum) HASH
c939701f5bbee7b400c7720582b44a6bc359d4c0b5cfbdefe089bef54cac0cbf6f343977828e2d164c90163c3cdc843c0c6e2892be7a8ec49dce487765caf2db  /catalyst/release/Pentoo_Full_amd64_hardened/pentoo-full-amd64-hardened-2023.0_p20230527.iso
# BLAKE2 (b2sum) HASH
63ec6c86b8f894dafcfd0d95e3aacafb40b7e5be01ef43aeb1cd0af6d05287b7ad8fc757158bd03a0573e0e98b070bac00ff9ce74da225d3e65c9a9973238f8e  /catalyst/release/Pentoo_Full_amd64_hardened/pentoo-full-amd64-hardened-2023.0_p20230527.iso.CONTENTS

which will obviously fail to verify unless user downloads it to exact same path.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions