Bug#1088288: gpgv-sq: fails to verify some good sha1 signatures because of default policy

To: miguel_tete17@hotmail.com, 1088288@bugs.debian.org
Subject: Bug#1088288: gpgv-sq: fails to verify some good sha1 signatures because of default policy
From: Christopher Obbard <obbardc@gmail.com>
Date: Tue, 22 Jul 2025 13:15:59 +0100
Message-id: <[🔎] CAP03XeqFv1q-33aKs4Hcd0_vZsnHsMwuzmu63vyKmFdBpthBXA@mail.gmail.com>
Reply-to: Christopher Obbard <obbardc@gmail.com>, 1088288@bugs.debian.org
In-reply-to: <[🔎] DB3PR0202MB3417A9604D078512A72FEF5A895CA@DB3PR0202MB3417.eurprd02.prod.outlook.com>
References: <633c6043-30c9-42a7-953b-6d7a71379faa@piquan.org> <172100112029.2496.16215254570824034966.reportbug@debvirt12.virt.lan> <c9e7e5530a9f6d8f5644437fb2d3c358172dd5ba.camel@debian.org> <[🔎] DB3PR0202MB3417A9604D078512A72FEF5A895CA@DB3PR0202MB3417.eurprd02.prod.outlook.com> <172100112029.2496.16215254570824034966.reportbug@debvirt12.virt.lan>

Hi,

On Tue, 22 Jul 2025 at 12:51, <miguel_tete17@hotmail.com> wrote:
> Hey Chris,
> Any updates on your private slack ticket?

The last update I had from Slack was in Feb:
> I've shared your comments with the team on our bug tracker.
> For transparency, we don't have an estimated timeline for a resolution of this bug. Our Product and Engineering teams evaluate bugs against severity, impact, scale, and frequency factors. With this in mind, they prioritize (and constantly reprioritize) working on issues according to impact.

I have pinged them again for an update.

For now, I use the flatpak package...


Cheers!

Chris

Reply to:

References:
- Bug#1088288: gpgv-sq: fails to verify some good sha1 signatures because of default policy
  - From: miguel_tete17@hotmail.com

Prev by Date: Bug#1088288: gpgv-sq: fails to verify some good sha1 signatures because of default policy
Next by Date: Bug#858406:
Previous by thread: Bug#1088288: gpgv-sq: fails to verify some good sha1 signatures because of default policy
Next by thread: Bug#858406:
Index(es):
- Date
- Thread