Outdated ZAP in Linux distros

Author: aoandCreated Apr 30, 2026Updated Sep 27, 2026

Labelsthird-party

Describe the bug:

The Ubuntu repository key expired on 20-Apr-2026, so APT refuses to install of update the package.

Steps to reproduce the behavior:

Go to https://software.opensuse.org/download.html?project=home%3Acabelo&package=zap
Follow instruction for Ubuntu 22.04:

bash

echo 'deb http://download.opensuse.org/repositories/home:/cabelo/xUbuntu_22.04/ /' | sudo tee /etc/apt/sources.list.d/home:cabelo.list
curl -fsSL https://download.opensuse.org/repositories/home:cabelo/xUbuntu_22.04/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_cabelo.gpg > /dev/null
sudo apt update

Get the error:

The following signatures were invalid: EXPKEYSIG 18B6CC30405F642D home:cabelo OBS Project <home:[email protected]>

Check the key directly:

bash

curl -fsSL https://download.opensuse.org/repositories/home:cabelo/xUbuntu_22.04/Release.key | gpg
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa2048 2021-08-23 [SC] [expired: 2026-04-20]
      1553C74FC763CE08361E8F0918B6CC30405F642D
uid           home:cabelo OBS Project <home:[email protected]>

Expected behavior:

The key should be valid

Software Versions:

OS: Ubuntu 22.04 ZAP: 2.16.1-1

Screenshots:

No response

Errors from the zap.log file:

No response

Additional context:

No response

Would you like to help fix this issue?

Source: zaproxy/zaproxy

View original on GitHub View discussion on GitHub