Package Details: jre8 8u401-1

Git Clone URL: https://aur.archlinux.org/jre8.git (read-only, click to copy)
Package Base: jre8
Description: Oracle Java 8 Runtime Environment LTS
Upstream URL: https://www.java.com/en/download/manual.jsp
Keywords: java-openjfx java-runtime-headless-jre java-runtime-jre java-web-start-jre
Licenses: custom:Oracle
Provides: java-openjfx, java-runtime, java-runtime-headless, java-runtime-headless-jre, java-runtime-jre, java-web-start, java-web-start-jre
Submitter: Det
Maintainer: severach
Last Packager: severach
Votes: 45
Popularity: 0.62
First Submitted: 2017-09-21 22:18 (UTC)
Last Updated: 2024-02-03 04:44 (UTC)

Dependencies (8)

Required by (1756)

Sources (2)

Latest Comments

« First ‹ Previous 1 2 3

Det commented on 2018-07-19 17:11 (UTC) (edited on 2018-07-19 17:15 (UTC) by Det)

No, you're missing the point :D.

Please read, eg. here: https://crypto.stackexchange.com/questions/1173/what-are-preimage-resistance-and-collision-resistance-and-how-can-the-lack-ther

Or my question (less technical): https://stackoverflow.com/questions/28378326/difference-between-preimage-resistance-and-second-preimage-resistance

Or the old Wiki entry (even less technical): https://wiki.archlinux.org/index.php?title=PKGBUILD&oldid=382360#Integrity

MarcinWieczorek commented on 2018-07-19 16:47 (UTC)

Okay then, let's extend the scope of the article:

The checksum type and values should always be those provided by upstream, such as in release announcements. When multiple types are available, the strongest checksum is to be preferred: sha256 over sha1, and sha1 over md5.

https://www.oracle.com/webfolder/s/digest/8u181checksum.html

Enough?

Det commented on 2018-07-19 16:30 (UTC)

You linked a section of the Wiki that actually had a pretty good chart about the differences between MD5, SHA-1, preimage and collision resistances.

It didn't fit the scope of the article tho, so it was removed. The only reasoning left there is literally "When multiple types are available, the strongest checksum is to be preferred".

Reason I was asking is because I don't think you know the aforementioned terms and differences.

MarcinWieczorek commented on 2018-07-19 16:26 (UTC)

I just did.

Det commented on 2018-07-19 16:25 (UTC)

Name one?

MarcinWieczorek commented on 2018-07-19 16:23 (UTC)

There are thousands of reasons why md5 should be avoided.

When multiple types are available, the strongest checksum is to be preferred: sha256 over sha1, and sha1 over md5.

https://wiki.archlinux.org/index.php/PKGBUILD#Integrity

Det commented on 2018-07-19 14:59 (UTC)

Becaaaause?

MarcinWieczorek commented on 2018-07-19 14:04 (UTC)

Please stop using md5 for checksums. Thanks!

Det commented on 2018-03-24 10:52 (UTC)

waddon1 flagged jre8 out-of-date on 2018-03-24 for the following reason:

The download page (http://download.oracle.com/errors/download-fail-1505220.html) has encountered an issue due to oracle changing the download process

All the downloads are down: http://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html

Stop flagging.

« First ‹ Previous 1 2 3