Thanks for the report! Thankfully not that big of an issue as SHA512 isn't widely adopted in the APT-world and SHA256 "good enough" for now.
apt-pkg/acquire-item.cc has the same issue in pkgAcqArchive::QueueNext() and therefore effecting all downloads expect the ones where a hash is forced. Theory says that this code should be in one central place rather than copied (as you can't force a hash for download this way) … -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1098752 Title: apt-get download checks sha256 hashes when sha512 hashes are available To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1098752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs