Florian Weimer wrote:
>> Usually, cron-apt has already noticed that there is an update
>> available before the DSA posting comes in.
>
> This is by design; the DSA is delayed until the archive has been
> updated properly (which means that it has arrived at all mirrors).
That's because the included md5sums are generated from the files in the
archive.
Cheers,
Moritz