protonscr

APT warning: Steam repo signature will be rejected soon (Debian 13)

steamclosed
ValveSoftware/steam-for-linux#12275 · opened 2025-08-16 by MtrTrixter · updated 2025-08-16 · 1 comments · github
MMtrTrixter 2025-08-16 github

Your system information

  • Steam client version (build number or date): Not installed yet
  • Distribution (e.g. Ubuntu): Debian 13 (Trixie)
  • Opted into Steam client beta?: No
  • Have you checked for system updates?: Yes
  • Steam Logs: Not applicable
  • GPU: AMD

Please describe your issue in as much detail as possible:

When running sudo apt update on Debian 13, I receive the following warning:
Warning: https://repo.steampowered.com/steam/dists/stable/InRelease: Policy will reject signature within a year, see --audit for details

This indicates that the GPG signature used by the Steam repository is based on outdated cryptographic standards (likely SHA1). Starting February 2026, APT will reject such signatures by default.

I expected the repository to use a secure signature algorithm (e.g. SHA256 or SHA512) compatible with current Debian policies.

Please consider updating the GPG key and repository signature to comply with Debian's new APT security requirements.

Steps for reproducing this issue:

  1. Install Debian 13 (Trixie)
  2. Add the official Steam repository
  3. Run sudo apt update

Note: This report was written with the help of a translator. Please excuse any language inaccuracies.

Kkisak-valve maintainer 2025-08-16 github

Hello @MtrTrixter, this issue is already being tracked at #12050. Closing as a duplicate.

Nothing extracted yet.