#1127813 extrepo nvidia-cuda outdated/broken, sha1 unsecure, pointing to debian12 repo on Trixie

Package:
extrepo
Source:
extrepo
Submitter:
Davius
Date:
2026-02-13 13:07:02 UTC
Severity:
normal
#1127813#5
Date:
2026-02-13 13:05:43 UTC
From:
To:
Dear Maintainer,

   * What led up to the situation?
	- sudo extrepo enable nvidia-cuda
		Réception de : 6 https://developer.download.nvidia.com/compute/cuda/repos/debian12/x86_64  InRelease [1 581 B]
		Err : 6 https://developer.download.nvidia.com/compute/cuda/repos/debian12/x86_64  InRelease
		Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on EB693B3035CD5710E231E123A4B469963BF863CC is not bound:            No binding signature at time 2026-02-09T20:13:44Z   because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance   because: SHA1 is not considered secure since 2026-02-01T00:00:00Z

		Attention : OpenPGP signature verification failed: https://developer.download.nvidia.com/compute/cuda/repos/debian12/x86_64  InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on EB693B3035CD5710E231E123A4B469963BF863CC is not bound:            No binding signature at time 2026-02-09T20:13:44Z   because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance   because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
		Erreur : Le dépôt https://developer.download.nvidia.com/compute/cuda/repos/debian12/x86_64  InRelease n'est pas signé.

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

	- install repo from nvidia .deb for debian 13 works
	- extrepo point to outdated repo

   * What outcome did you expect instead?

	- Please, fix this because it's the most simple way to update nvidia drivers on debian.


*** End of the template - remove these template lines ***