Skip to content

Apt repo metadata for r3_12_2/latest has stale sizes/hashes for Ubuntu amd64 .deb assets #3761

Description

@hornej

Summary

Installing/upgrading Jamulus 3.12.2 from the GitHub apt repository currently fails because apt sees a size/hash mismatch for the Ubuntu amd64 .deb assets.

Apt source:

deb https://github.com/jamulussoftware/jamulus/releases/latest/download/ ./

Environment

  • Debian 12 / bookworm
  • amd64
  • Packages: jamulus, jamulus-headless
  • Target version: 3.12.2
  • Observed on June 30, 2026

Repro

sudo rm -f /var/cache/apt/archives/jamulus*.deb /var/cache/apt/archives/partial/jamulus*.deb
sudo rm -f /var/lib/apt/lists/*jamulussoftware* /var/lib/apt/lists/*github.com_jamulussoftware*
sudo apt-get update
sudo apt-get install -y jamulus jamulus-headless

Observed

Apt fails with size/hash mismatch errors:

jamulus_3.12.2_ubuntu_amd64.deb
File has unexpected size (1504324 != 1506048)

jamulus-headless_3.12.2_ubuntu_amd64.deb
File has unexpected size (1248768 != 1248544)

For jamulus-headless, apt expects:

Filesize: 1248544
SHA256: 9bacf7223ef240e30db8e268de8fb6ab536da31c6c4d98f6e07299cdaa4bbc66

But the GitHub r3_12_2 release asset currently reports:

Filesize: 1248768
SHA256: 0b86fc9596d6292b98e6a5fe959527fe3a885d366f6dd17fb355757b6ed9c96c

For jamulus, apt expects:

Filesize: 1506048
SHA256: 1b2060ef4ba262aa7bd7a9ecbe525acae70ce4f6cae45c4e734dcbc173187c7f

But the GitHub r3_12_2 release asset currently reports:

Filesize: 1504324
SHA256: e8a3040ddbf9dd16649509f4d820570c646e1bee6503c4b1b81b9d353ff8dd3d

Expected

apt-get install jamulus jamulus-headless should install 3.12.2 cleanly from the Jamulus GitHub apt repository.

Workaround

Installing the pinned release assets directly works after validating the GitHub release SHA-256 digests:

curl -fL -O https://github.com/jamulussoftware/jamulus/releases/download/r3_12_2/jamulus_3.12.2_ubuntu_amd64.deb
curl -fL -O https://github.com/jamulussoftware/jamulus/releases/download/r3_12_2/jamulus-headless_3.12.2_ubuntu_amd64.deb
sha256sum *.deb
sudo apt-get install -y ./jamulus_3.12.2_ubuntu_amd64.deb ./jamulus-headless_3.12.2_ubuntu_amd64.deb

Could the Packages / Release / InRelease metadata for r3_12_2 and/or latest/download be regenerated to match the current release assets?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions