> I use debian, and it uses GPG signatures.  so I understand that sha-1
> issue even less 
Which release do you worry about? Even oldoldstable is at 3.4.2, which
should be fine according to
> If you do not update to 3.4.2 or later, you will be stuck at the last
> ruleset with SHA-1 signatures.

Reply via email to