From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 1489 invoked by alias); 3 Mar 2017 14:09:13 -0000 Mailing-List: contact overseers-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Archive: List-Post: List-Help: , Sender: overseers-owner@sourceware.org Received: (qmail 1463 invoked by uid 89); 3 Mar 2017 14:09:12 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD,SPF_HELO_PASS autolearn=ham version=3.3.2 spammy=our X-HELO: mx1.redhat.com Received: from mx1.redhat.com (HELO mx1.redhat.com) (209.132.183.28) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Fri, 03 Mar 2017 14:09:10 +0000 Received: from int-mx11.intmail.prod.int.phx2.redhat.com (int-mx11.intmail.prod.int.phx2.redhat.com [10.5.11.24]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 5E83DC04D2E2; Fri, 3 Mar 2017 14:09:11 +0000 (UTC) Received: from fche.csb (vpn-63-4.rdu2.redhat.com [10.10.63.4]) by int-mx11.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id v23E9AFw023307; Fri, 3 Mar 2017 09:09:11 -0500 Received: by fche.csb (Postfix, from userid 2569) id 5F84158AE5; Fri, 3 Mar 2017 09:09:09 -0500 (EST) Date: Fri, 03 Mar 2017 14:09:00 -0000 From: "Frank Ch. Eigler" To: Andrew Pinski Cc: "overseers@sourceware.org" Subject: Re: SVN and SHA-1 hash Message-ID: <20170303140909.GD16375@redhat.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.2i X-SW-Source: 2017-q1/txt/msg00108.txt.bz2 Hi - > https://arstechnica.com/security/2017/02/watershed-sha1-collision-just-broke-the-webkit-repository-others-may-follow/ > > Even though we trust our users., it might be useful to make sure we > put in the hook to the current svn repos; I think gcc is the only one. That could be a good idea - take it gcc@ and/or those operating the gccadmin account here. - FChE