the sha256 of cups 1.5.4 was that of a HTML (broken in md5->sha256 update)