Comment 9 for bug 1078697

Huhuh? That's sad.

But apt-get source isn't the only tool. ;)

On Fri, Jan 11, 2013 at 2:18 PM, Marc Deslauriers <
<email address hidden>> wrote:

> Having the Sources file have better hashes than md5 doesn't improve
> things for now, as "apt-get source" only checks for md5.
>
> --
> You received this bug notification because you are a member of Goobuntu
> Team, which is subscribed to the bug report.
> https://bugs.launchpad.net/bugs/1078697
>
> Title:
> Ubuntu archive is missing SHA-1/SHA-256 hashes for some packages
>
> Status in Launchpad itself:
> Triaged
>
> Bug description:
> As part of the Debian derivatives census, we are doing some checks on
> all derivatives. We noticed that a number of source packages are missing
> SHA-1/SHA-256 hashes. You may have inherited this issue from Debian, we
> had the same issue until recently. Here are some sample messages from
> the report below, which is generated daily.
>
> WARNING: source cvstrac 2.0.1-3: SHA-256 hashes but no hash for the dsc
> file
> WARNING: source cvstrac 2.0.1-3: SHA-1 hashes but no hash for the dsc
> file
> WARNING: source diveintopython 5.4-2ubuntu2: no SHA-256 hash
> WARNING: source diveintopython 5.4-2ubuntu2: no SHA-1 hash
>
> http://dex.alioth.debian.org/census/Ubuntu/check-package-list
>
> Please ignore the warnings about GPG and InRelease stuff, they are due
> to python-apt not supporting some things in Debian squeeze.
>
> affects launchpad
> subscribe ubuntu-archive
>
> --
> bye,
> pabs
>
> http://wiki.debian.org/PaulWise
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/launchpad/+bug/1078697/+subscriptions
>