[Bug 1078697] Re: Ubuntu archive is missing SHA-1/SHA-256 hashes for some packages

[Thomas Bushnell, BSG]

I just ran in to this in our new mirroring system for pulling packages,
hence my lateness to the party.

A cursory glance at my list suggests that William's characterization is
correct; except for the language packs, these are pretty old packages.

There is an annoying wrinkle that .dsc's are normally gpg-signed by the
package maintainer, so the .dsc could only be changed by removing the
signature. Perhaps that's the right thing; I'm not sure.

However, nothing requires the Sources file to have only the headers in
the .dsc; it would at least be an improvement to have the Sources file
contain full hashes when it's generated, even if the .dsc (or the
.changes) lack them.

-- 
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1078697

Title:
  Ubuntu archive is missing SHA-1/SHA-256 hashes for some packages

To manage notifications about this bug go to:
https://bugs.launchpad.net/launchpad/+bug/1078697/+subscriptions