SRU Justification:
Impact: Using dscverify (often embedded in other tools) fails to verify Ubuntu archive keys.
The script doesn't add the Ubuntu-installed keyrings (package ubuntu-keyring) to the list of keyrings passed to gpg.
testcase: Without the keyrings dscverify will fail, reporting "dscverify: can't find any Debian keyrings"
Adding the keyrings to the list results in successful verification of the package.
SRU Justification:
Impact: Using dscverify (often embedded in other tools) fails to verify Ubuntu archive keys.
The script doesn't add the Ubuntu-installed keyrings (package ubuntu-keyring) to the list of keyrings passed to gpg.
testcase: Without the keyrings dscverify will fail, reporting "dscverify: can't find any Debian keyrings"
Adding the keyrings to the list results in successful verification of the package.