misc/60770: more SHA512 needed

["rwhitlock22%gmail.com@localhost via gnats" <gnats-admin%NetBSD.org@localhost>]

>Number:         60770
>Category:       misc
>Synopsis:       more SHA512 needed
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    misc-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Sep 23 02:05:00 +0000 2026
>Originator:     Robert Whitlock
>Release:        N/A
>Organization:
>Environment:
N/A
>Description:
https://cdn.netbsd.org/pub/NetBSD/NetBSD-11.0/evbarm-aarch64/binary/gzimg/MD5 has a hash for arm64.img and https://cdn.netbsd.org/pub/NetBSD/NetBSD-11.0/evbarm-aarch64/binary/gzimg/SHA512 has a hash for arm64mbr.img. They should both be, at least, in SHA512, but it would make more sense to have hashes for both files in any of MD5/SHA512/etc that are present.

Additionally, it would be better to publish the hashes of the compressed files, since that is what is offered for download, and that would avoid the need to pass a potentially corrupted file into a decompression program, which might exploit bugs in the decompression program.
>How-To-Repeat:
Look at https://cdn.netbsd.org/pub/NetBSD/NetBSD-11.0/evbarm-aarch64/binary/gzimg/ and the hash files that are listed.
>Fix: