Restrict apt trust of Finnix GPG keys

Bug #1349962 reported by Ryan Finnie on 2014-07-29
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Finnix
High
Unassigned

Bug Description

Current apt imports /usr/share/keyrings/finnix-keyring.gpg, which has all primary Finnix GPG keys. This should be restricted down to the Finnix Archive Signing Key.

Distribution: 111
Source: finnix-keyring
Source-Version: 20140729.0

A package update has been sent to the Finnix archive, which marks this
bug as fixed. A copy of the upload changes is included below.

Thank you,
Your friendly Finnix Launchpad assistant

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 29 Jul 2014 12:33:37 -0700
Source: finnix-keyring
Binary: finnix-keyring
Architecture: source
Version: 20140729.0
Distribution: unstable
Urgency: low
Maintainer: Ryan Finnie <email address hidden>
Changed-By: Ryan Finnie <email address hidden>
Description:
 finnix-keyring - Scripts needed to run Finnix
Changes:
 finnix-keyring (20140729.0) unstable; urgency=low
 .
   * Generate finnix-archive-keyring.gpg, use it for apt-key
     (LP: #1349962)
Checksums-Sha1:
 36c435b333843172406c63f877ce93fd11f696a0 1633 finnix-keyring_20140729.0.dsc
 6f1db4c35f75af4a1a923540f40f28039381e49f 12004 finnix-keyring_20140729.0.tar.xz
Checksums-Sha256:
 966025ca7dd48bf4a4b692a7a27e419bdb51a6e4d9d38f6ca3fc60e418e437d4 1633 finnix-keyring_20140729.0.dsc
 a0cf3d1b2304185a714e58d388f999acd849e1542d6e7289302d202cf582bda8 12004 finnix-keyring_20140729.0.tar.xz
Files:
 bdd62fb05650bb83c1821dd583b6f716 1633 misc optional finnix-keyring_20140729.0.dsc
 6aa2cccb51ff8d8f75c77a8057454243 12004 misc optional finnix-keyring_20140729.0.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQIcBAEBCAAGBQJT1/eAAAoJEH5go6aGro2YoAIQAKOIy7dvWi319ROrpuNgnr1M
qVojtGx0JaD3ulr0iSLMUYHOmP6f78irGBP4K26+2B1YIi+z2EphN1K7/0jQ1FV6
DJZaHUqbKOe0Hmv35xDEzmUQzmsWBmRnd8NOHVQ6oJv2D3Gh6NvNbQjFSlxONOzu
7DgDBILNkYR3X3XtUTO4RP6PmjzYEwXYl4PNgVIEPZOFWowtI/8wdg+jQHFkq9O+
4QEynuYU5SQjIvMYWQRJiXNFwpV/hhpIPzpEudKFaRPNGTRxk2yx+myLruspJlmS
6q47RE97y13BCa06xNFkCaI8sC+a2xWZLz7YL7OaJFiey0duUaa3ifcY+Lax4KtS
3TCHAFERNVJ3XgiBTzPne0I8p4jYuBdZ8C8L2qbQsBZ78ew+Amu1NgnjnWJxcyK5
Aw0n1mmDTzP2RFy8FE+3m+xG+bdF5prMca+dXSJMk5FTQ/tlnziNagVb1MLw0VYw
Yl0YGYzT1urpucBSrqCCmMrO2qeqtbmBfDxzqjnAj73f9pp6uzP1pgSF9jDrd3dP
0+ixiVFFsjhlbaXuAMRXU4UAFl3me9fUCRIQe68chwWWojvlkEdlgKQzoi1TKR1f
XOB4DruSTwPJ8q1tvDDVoaUwfVopj8uQP94RWDjVZyCaXpWDKBN6fBWAJoZQUCst
6z649JaIr1CJS6wwRGOT
=2jLy
-----END PGP SIGNATURE-----

Changed in finnix:
status: New → Fix Committed
tags: added: archive-fixed finnix-keyring
Ryan Finnie (fo0bar) on 2015-06-04
Changed in finnix:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers