Hey Christoph, On Sat, Jul 11, 2026 at 09:08:07AM +0200, Christoph Biedl wrote: >Package: sbsigntool >Version: 0.9.4-3.2 >Severity: important > >Dear Maintainer, > >there is a nasty and longstanding bug in sbverify: Verification of >intermediate certificates returns true, even if there's no match, even >if no signer's certificate was passed at all. > >In unstable, this was fixed in 0.9.4-6: > >| * Add patch from upstream to fix certificate validation with >| intermediates. > >In my opinion, this should be addressed in stable as well (actually also >oldstable but bookworm already moved to the downstream distribution).
ACK, I'm working on a trixie update for this now. The patch applies cleanly, I just need to double-check with some tests. -- Steve McIntyre, Cambridge, UK. [email protected] Into the distance, a ribbon of black Stretched to the point of no turning back
