Debian 13 (APT/Sequoia) will reject Plex repo key after 2026-02-01 — “key not bound / SHA-1”

Plex Media Server
1

Server Version#:v1.42.1.10060-4e8b05daf
Player Version#: N/A

Hi Plex team,
On Debian 13 (APT with Sequoia), apt update --audit reports:
“Signing key CD665CBA0E2F88B7373F7CB997203C7B3ADCA79D is not bound… policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance… SHA1 is not considered secure since 2026-02-01.”
Could you please add a modern binding self-signature (e.g., SHA-256) to the repo key or rotate to a new key and re-sign the repository metadata? Otherwise APT will reject the repo after 2026-02-01. Thanks!

2

If you take time to search the forum you would find several threads on this already. For now, it is a non-issue.

3

This is known, acknowledged , on the task last for this year.

Not a factor.

Closing.