Ubuntu hashes for 14.04.1 missing on https://help.ubuntu.com/community/UbuntuHashes

Yes, Manfred is right.

For eg: the Checksum for ubuntu-14.04-desktop-amd64.iso is 119cb63b48c9a18f31f417f09655efbd whereas online it is mentioned as dccff28314d9ae4ed262cfc6f35e5153

This is leading to quite a confusion.

REquest you to fix.

Please see also: bug 1288593 and bug 1219589

Hi,

Yes, it's true, I've twice dowloads but this bug is just with 64 bit no with 32 bits.

I've download ubuntu-14.04.1-desktop-amd64.iso MD5: b181af2b85a8c6b4df9a9e04253b0b45
I've download ubuntu-14.04-desktop-amd64.iso MD5: 03f7cca37de68e53ded51809283da671

But in official website Ubuntu : http://releases.ubuntu.com/trusty/MD5SUMS
is write :

dccff28314d9ae4ed262cfc6f35e5153 *ubuntu-14.04-desktop-amd64.iso
119cb63b48c9a18f31f417f09655efbd *ubuntu-14.04.1-desktop-amd64.iso

:-( Good look

2014-08-09:

I just went to verify my 14.04.1 downloads, and this is still an outstanding issue. In my opinion, the issue should be higher priority. Don't you want your users to be proactive and security-minded, checking the validity of their downloaded (especially if e.g. torrented) files?

Entirely unofficially, I'll list here the MD5 values I calculated for the ISO files I just downloaded directly, via browser, from ubuntu.com. I am not stating nor confirming that they are correct; this is simply what I found with my own downloads.

119cb63b48c9a18f31f417f09655efbd *ubuntu-14.04.1-desktop-amd64.iso

a4fc15313ef2a516bfbf83ce44281535 *ubuntu-14.04.1-desktop-i386.iso

@Pas: If you like, you can compare them with

http://releases.ubuntu.com/trusty/MD5SUMS

Gunnar,

Thank you for the response. I did subsequently find and use that, although it is not an HTTPS delivered resource. I also note the availability of OpenPGP-signed hashes, although I think that is beyond the capability of many if not the majority of "mainstream" Ubuntu users, and I don't have a PGP implementation installed on the Windows computer I'm using at the moment.

I should have been more restrained, perhaps, in adding my prior comment to this issue. However, with the burgeoning security concerns these days also among the general population, I think it is helpful to encourage and support their being as proactive as possible. In other words, we *want* people checking against verified trusted hashes, delivered via HTTPS where the user is not yet comfortable with OpenPGP and tools that implement it.

I hope I was and am not annoying here nor overly pedantic, especially inasmuch as I am a new contributor to the conversation, here. Again, perhaps I should have waited longer and investigated further, first, and/or refrained altogether from commenting.

Regards

Hi Pas!

On 2014-08-10 00:30, Pas Besoin wrote:
> I should have been more restrained, perhaps, in adding my prior
> comment to this issue.

No problem; your comment was well motivated IMO. The truth is that very few people have access to edit the page in question, and they are loaded with other work.

> However, with the burgeoning security concerns these days also among
> the general population, I think it is helpful to encourage and
> support their being as proactive as possible. In other words, we
> *want* people checking against verified trusted hashes, delivered via
> HTTPS where the user is not yet comfortable with OpenPGP and tools
> that implement it.

Indeed. Most likely that's exactly the reason why the page was created. But of course, it should be maintained in due time, or else we should drop it.

Hash for Ubuntu GNOME 14.04.1 still missing!

Please add:
ubuntu-gnome-14.04.1-desktop-amd64.iso 31ac57691a45a381ded0ab2a3588b77a
ubuntu-gnome-14.04.1-desktop-i386.iso a3965d4e20d8c85dbaa5c36c6898fe5d

Or if not updated, please allow others to do it. Thanks.

Don't bother - the image is defective.

> -----Original Message-----
> From: <email address hidden>
> Sent: Wed, 13 Aug 2014 19:39:06 -0000
> To: <email address hidden>
> Subject: [Bug 1349715] Re: Ubuntu hashes for 14.04.1 missing on
> https://help.ubuntu.com/community/UbuntuHashes
>
> Hash for Ubuntu GNOME 14.04.1 still missing!
>
> Please add:
> ubuntu-gnome-14.04.1-desktop-amd64.iso 31ac57691a45a381ded0ab2a3588b77a
> ubuntu-gnome-14.04.1-desktop-i386.iso
> a3965d4e20d8c85dbaa5c36c6898fe5d
>
> Or if not updated, please allow others to do it. Thanks.
>
> --
> You received this bug notification because you are subscribed to a
> duplicate bug report (1355402).
> https://bugs.launchpad.net/bugs/1349715
>
> Title:
> Ubuntu hashes for 14.04.1 missing on
> https://help.ubuntu.com/community/UbuntuHashes
>
> Status in “ubuntu-docs” package in Ubuntu:
> Triaged
>
> Bug description:
> The MD5 hash values for the Ubuntu 14.04.1 iso files are missing on
> https://help.ubuntu.com/community/UbuntuHashes
>
> The instructions in https://help.ubuntu.com/community/HowToMD5SUM
> refer to that web page as source for checking the validity of a
> download, but the values there end with 14.04.0
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/ubuntu/+source/ubuntu-docs/+bug/1349715/+subscriptions

____________________________________________________________
Can't remember your password? Do you need a strong and secure password?
Use Password manager! It stores your passwords & protects your account.
Check it out at http://mysecurelogon.com/password-manager

This also affects other distributions such as Lubuntu.

Re: #8 Uriel Tunz (u2n) hashes as reported agree with what I got. Thanks.

https://bugs.launchpad.net/ubuntu/+source/ubuntu-docs/+bug/1361669

Sorry for the duplicate.

We need to put an end to this recurring issue.
Nobody on the docs team has rights to edit the page, as the person that did has long since left the team.
The page should be edited to point to the actual place to find the hashes and then be done with it.

And yes, the actual place to find the hashes seems to be http only instead of https. To bad, but it is not our (doc team's) problem.

@Colin Watson: You seem to have the power to edit the page. Would you be willing to delete all the content and just put in a link to where to really find the hashes? (or anybody else that sees this and has such powers)

I still seem to have such 'powers' and have added the 14.04.1 hashes to the page. A fix to the immediate issue at least.