So we had a problem on the mirrors for #debian #bookworm - appears the wrong stable #openpgp key got used to sign it. The one from #trixie was in use.
The "only" implication here is people who pin their debian sources to specific keys, their #apt will complain. That's annoying, which is why we fixed it just now, resigning using the correct key.
Mirrors already got triggered, updates should be visible soon.
In case anyone wants to run off yelling security problem: Nah. Stuff is (and was) still signed by two keys from us #ftpmaster - and it is the same people handling the stable keys for bookworm and trixie. So only the wrong one used, nothing more.
