Summary: | The stage 3 files are not signed with a valid Gentoo key | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Nathan Shearer <mail> |
Component: | Misc | Assignee: | Gentoo Security <security> |
Status: | RESOLVED INVALID | ||
Severity: | major | CC: | jmbsvicetto, mail, mgorny, robbat2 |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://distfiles.gentoo.org/releases/amd64/autobuilds/current-stage3-amd64/stage3-amd64-20190327T214503Z.tar.xz.DIGESTS.asc | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- |
Description
Nathan Shearer
2019-03-29 01:12:00 UTC
This is a subkey of the regular key: $ gpg --list-keys 534E4209AB49EEE1C19D96162C44695DB9F6043D pub rsa4096 2009-08-25 [SC] [expires: 2020-01-01] 13EBBDBEDE7A12775DFDB1BABB572E0E2D182910 uid [ unknown] Gentoo Linux Release Engineering (Automated Weekly Release Key) <releng@gentoo.org> sub rsa2048 2019-02-23 [S] [expires: 2020-01-01] You need to refresh keys, i.e.: $ gpg --refresh-keys 13EBBDBEDE7A12775DFDB1BABB572E0E2D182910 unrestricting, no sec concerns here. |