This issue has been created
 
 
XWiki Infrastructure / cid:jira-generated-image-avatar-9c69f099-04f7-46d6-847b-2fc7552ce1fe XINFRA-433 Open

Debian repository GPG key needs to be updated

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-544d3095-8532-496a-86b4-63059d11fd9e Simon Urli created this issue on 02/Sep/25 09:30
 
Summary: Debian repository GPG key needs to be updated
Issue Type: cid:jira-generated-image-avatar-9c69f099-04f7-46d6-847b-2fc7552ce1fe Task
Assignee: Unassigned
Components: Debian
Created: 02/Sep/25 09:30
Priority: cid:jira-generated-image-static-major-520d1890-a0f9-4009-a813-b55a128844d1 Major
Reporter: Simon Urli
Description:

Using apt update on Debian 13 leads to following warning and information:

Warning: http://maven.xwiki.org/lts-latest/Release.gpg: Policy will reject signature within a year, see --audit for details
Audit: http://maven.xwiki.org/lts-latest/Release.gpg: Sub-process /usr/bin/sqv returned an error code (1), error message is:
   Signing key on E5A298A7AF53948CC6CFD633F716794B93CC9C13 is not bound:
              No binding signature at time 2025-09-01T22:27:42Z
     because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance
     because: SHA1 is not considered secure since 2026-02-01T00:00:00Z