Subject: debootstrap: Does not recognize SHA512 in release index files
Package: debootstrap
Version: 1.0.142ubuntu1
Severity: normal
Ubuntu 26.10 (Stonking Stingray) recently disabled the hash generation
in the Release index files of md5, sha1, sha256 and only left sha512
enabled.
Debootstrap currently does not handle this as it only has a hardcoded
SHA_SIZE=256.
The workaround is setting SHA_SIZE=512, but ideally debootstrap should
automatically choose the strongest hash in the Release file.
If I understand correctly debian currently does not publish SHA512 in its
index files at all, so I am also opening the bug here to ask if a patch
from me to add this behavior would be accepted.
