#1135159 extrepo-offline-data: syncthing repo needs a new key

Package:
extrepo-offline-data
Source:
extrepo-offline-data
Submitter:
Landry MINOZA
Date:
2026-04-28 13:03:02 UTC
Severity:
normal
#1135159#5
Date:
2026-04-28 13:00:45 UTC
From:
To:
Dear Maintainer,

After enabled the syncthing repo, when running `sudo LANG=C apt update --audit`
I get

Err:9 https://apt.syncthing.net syncthing InRelease
  Sub-process /usr/bin/sqv returned an error code (1), error message is:
Missing key FBA2E162F2F44657B38F0309E5665F9BD5970C47, which is needed to verify
signature. Signing key on 37C84554E7E0A261E4F76E1ED26E6ED000654A3E is not
bound:            No binding signature at time 2026-04-28T01:44:25Z   because:
Policy rejected non-revocation signature (PositiveCertification) requiring
second pre-image resistance   because: SHA1 is not considered secure since
2026-02-01T00:00:00Z

After replacing the key with the one upstream (https://syncthing.net/release-
key.gpg) (sha256:
e27a0f4741f9043a7de44c074c5cde903dc6c7ba255ebe5a92b8eb897aa0ca72)
enarmored and copied to /var/lib/extrepo/keys/syncthing.asc

Their is no error anymore

thx