[Debian] Policy will reject signature within a year
Hello,

I upgraded to Debian Trixie yesterday, and when I run sudo apt update, I get the following warning message:

Warning: https://repo.steampowered.com/steam/dists/stable/InRelease: Policy will reject signature within a year, see --audit for details

However, this does not seem to affect the functionality of the Steam launcher.

Here is the full output of the update command:

gaming@lenovo:~$ sudo apt update
[sudo] Mot de passe de gaming :
Atteint : 1 http://deb.debian.org/debian trixie InRelease
Atteint : 2 http://deb.debian.org/debian trixie-updates InRelease
Atteint : 3 http://security.debian.org/debian-security trixie-security InRelease
Réception de : 4 https://repo.steampowered.com/steam stable InRelease [2 858 B]
Atteint : 5 http://deb.debian.org/debian trixie-backports InRelease
2 858 o réceptionnés en 0s (17,6 ko/s)
Tous les paquets sont à jour.
Warning: https://repo.steampowered.com/steam/dists/stable/InRelease: Policy will reject signature within a year, see --audit for details

My steam source list:
gaming@lenovo:~$ cat /etc/apt/sources.list.d/steam-stable.sources
Types: deb deb-src
URIs: https://repo.steampowered.com/steam/
Suites: stable
Components: steam
Signed-By: /usr/share/keyrings/steam.gpg

For reference, here is my Debian version:

gaming@lenovo:~$ cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux 13 (trixie)"
NAME="Debian GNU/Linux"
VERSION_ID="13"
VERSION="13 (trixie)"
VERSION_CODENAME=trixie
DEBIAN_VERSION_FULL=13.0
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"
< >
Showing 1-3 of 3 comments
Specifically:
Warning: https://repo.steampowered.com/steam/dists/stable/InRelease: Policy will reject signature within a year, see --audit for details Audit: https://repo.steampowered.com/steam/dists/stable/InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on BA1816EF8E75005FCF5E27A1F24AEA9FB05498B7 is not bound: No binding signature at time 2025-06-02T14:41:49Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z

So Valve has until February of next year to fix this.
Last edited by Ben Lubar; 11 Aug @ 8:50am
N4K 11 Aug @ 8:49am 
:steamy:

Steam does not upload saved files to your cloud.
Steam uploads saved files to the official Steam servers on your user ID
< >
Showing 1-3 of 3 comments
Per page: 1530 50