Warnings about weak hash

General Help
1

What does this output of the command executed mean?

marley@lenovo-IdeaPad-S145:~$ sudo apt update
Atingido:1 http://br.archive.ubuntu.com/ubuntu jammy InRelease
Atingido:2 https://brave-browser-apt-release.s3.brave.com stable InRelease                                                                                             
Atingido:3 https://download.docker.com/linux/ubuntu jammy InRelease                                                                                                    
Atingido:4 https://repository.spotify.com stable InRelease                                                                                                             
Atingido:5 http://br.archive.ubuntu.com/ubuntu jammy-backports InRelease                                                                                               
Atingido:6 https://packages.microsoft.com/repos/code stable InRelease                                                                                                  
Obter:7 http://br.archive.ubuntu.com/ubuntu jammy-updates InRelease [128 kB]                                                                                           
Atingido:8 https://updates.signal.org/desktop/apt xenial InRelease                                                                                                     
Atingido:9 https://dl.google.com/linux/chrome/deb stable InRelease                                                                                                     
Atingido:10 https://packages.mozilla.org/apt mozilla InRelease                                                                                                         
Atingido:11 http://security.ubuntu.com/ubuntu jammy-security InRelease                                                                                                 
Obter:12 http://br.archive.ubuntu.com/ubuntu jammy-updates/main amd64 DEP-11 Metadata [114 kB]                                          
Atingido:13 https://ppa.launchpadcontent.net/zorinos/apps/ubuntu jammy InRelease            
Obter:14 http://br.archive.ubuntu.com/ubuntu jammy-updates/restricted amd64 DEP-11 Metadata [212 B]
Obter:14 http://br.archive.ubuntu.com/ubuntu jammy-updates/restricted amd64 DEP-11 Metadata [212 B]                   
Ign:14 http://br.archive.ubuntu.com/ubuntu jammy-updates/restricted amd64 DEP-11 Metadata                                
Obter:14 http://br.archive.ubuntu.com/ubuntu jammy-updates/restricted amd64 DEP-11 Metadata [212 B]                         
Err:14 http://br.archive.ubuntu.com/ubuntu jammy-updates/restricted amd64 DEP-11 Metadata                                             
  Hash Sum incorreto
  Hashes of expected file:
   - Filesize:212 [weak]
   - SHA256:50c19c1c55160be84a7483fa464d998d5ea56440155a0267da72bfb9ba0fbaf3
   - SHA1:ff2da340aa86483c1319f73c06fd37693f1c15c4 [weak]
   - MD5Sum:cd2ad1194961787c934858ce8167d50a [weak]
  Hashes of received file:
   - SHA256:744b430401c9b71d76a826a5d4905b3a788b6811acd8e57a4eb8c06c91a6205e
   - SHA1:0d588be60820eb8e260c15638dec033000810049 [weak]
   - MD5Sum:99427a8119410b7f0ab71e50a0af948f [weak]
   - Filesize:212 [weak]
  Last modification reported: Tue, 27 May 2025 22:50:37 +0000
  Release file created at: Wed, 28 May 2025 11:50:38 +0000
Atingido:17 https://ppa.launchpadcontent.net/zorinos/drivers/ubuntu jammy InRelease                                                   
Atingido:18 https://packages.zorinos.com/stable jammy InRelease
Atingido:19 https://packages.zorinos.com/patches jammy InRelease
Atingido:20 https://packages.zorinos.com/apps jammy InRelease
Atingido:21 https://packages.zorinos.com/drivers jammy InRelease
Atingido:22 https://ppa.launchpadcontent.net/zorinos/patches/ubuntu jammy InRelease
Atingido:23 https://ppa.launchpadcontent.net/zorinos/stable/ubuntu jammy InRelease
Baixados 128 kB em 2s (58,7 kB/s)
Lendo listas de pacotes... Pronto
E: Falhou ao buscar http://br.archive.ubuntu.com/ubuntu/dists/jammy-updates/restricted/dep11/Components-amd64.yml.xz  Hash Sum incorreto
   Hashes of expected file:
    - Filesize:212 [weak]
    - SHA256:50c19c1c55160be84a7483fa464d998d5ea56440155a0267da72bfb9ba0fbaf3
    - SHA1:ff2da340aa86483c1319f73c06fd37693f1c15c4 [weak]
    - MD5Sum:cd2ad1194961787c934858ce8167d50a [weak]
   Hashes of received file:
    - SHA256:744b430401c9b71d76a826a5d4905b3a788b6811acd8e57a4eb8c06c91a6205e
    - SHA1:0d588be60820eb8e260c15638dec033000810049 [weak]
    - MD5Sum:99427a8119410b7f0ab71e50a0af948f [weak]
    - Filesize:212 [weak]
   Last modification reported: Tue, 27 May 2025 22:50:37 +0000
   Release file created at: Wed, 28 May 2025 11:50:38 +0000
E: Falhou o download de alguns ficheiros de índice. Foram ignorados ou os antigos foram usados em seu lugar.
marley@lenovo-IdeaPad-S145:~$
2

Incorrect hash sum (or checksum verification error) I would think implies that the downloaded file was corrupted in transit.
Check in Software Updater that download source is set to "Main Server" instead of a local/regional server.
Try running the updates again, maybe at a time when internet is less likely to be busy.

1 Like
3

The [weak] bit isn't what's concerning so much as that there are differences between the expected and received hashes, which indicates that the file you're getting somehow doesn't match the file that's supposed to be sent.

The [weak] tags I suspect are just warnings that the SHA1 and MD5 algorithms aren't considered good anymore. You can find a lot of info on this by searching "SHA1 insecure" or "MD5 insecure." Since they're being used here as checksums, not password hashes, and since there's also SHA256 present, that's nothing to worry about. It's just that the files received differ from the files sent that's a concern.