[Bug 1023321] [NEW] apt should handle removed keys better

Tim Kornhammar tim.kornhammar at gmail.com
Wed Jul 11 09:27:11 UTC 2012


Public bug reported:

Here is an example of what I mean. For "regular" users this is really paper cut, since everyone does not know about keys or don't want to know.
http://www.liberiangeek.net/2012/06/update-spotify-repository-key-in-ubuntu/

Proposal:
Create a "follow up" system where the key has been "updated", as long as the user gets an option to use the new key it should be fine security wise.

Another "similar" bug, although that bug seems to know the new key.
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/380912

** Affects: apt (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1023321

Title:
  apt should handle removed keys better

Status in “apt” package in Ubuntu:
  New

Bug description:
  Here is an example of what I mean. For "regular" users this is really paper cut, since everyone does not know about keys or don't want to know.
  http://www.liberiangeek.net/2012/06/update-spotify-repository-key-in-ubuntu/

  Proposal:
  Create a "follow up" system where the key has been "updated", as long as the user gets an option to use the new key it should be fine security wise.

  Another "similar" bug, although that bug seems to know the new key.
  https://bugs.launchpad.net/ubuntu/+source/apt/+bug/380912

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1023321/+subscriptions




More information about the foundations-bugs mailing list