2021-03-20 21:50:29 |
Felipe Reyes |
bug |
|
|
added bug |
2021-03-20 21:51:00 |
Felipe Reyes |
summary |
W: GPG error: http://ddebs.ubuntu.com bionic Release: The following signatures were invalid: EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com> |
EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com> |
|
2021-03-20 21:52:23 |
Felipe Reyes |
description |
The public key used by the debugging symbols repository /usr/share/keyrings/ubuntu-dbgsym-keyring.gpg from the package ubuntu-dbgsym-keyring expired.
$ apt policy ubuntu-dbgsym-keyring
ubuntu-dbgsym-keyring:
Installed: 2020.02.11.2
Candidate: 2020.02.11.2
Version table:
*** 2020.02.11.2 500
500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages
500 http://archive.ubuntu.com/ubuntu focal/main i386 Packages
100 /var/lib/dpkg/status
$ gpg --no-default-keyring --keyring /usr/share/keyrings/ubuntu-dbgsym-keyring.gpg --list-keys
/usr/share/keyrings/ubuntu-dbgsym-keyring.gpg
---------------------------------------------
pub rsa4096 2016-03-21 [SC] [expired: 2021-03-20]
F2EDC64DC5AEE1F6B9C621F0C8CAB6595FDFF622
uid [ expired] Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com> |
The public key used by the debugging symbols repository /usr/share/keyrings/ubuntu-dbgsym-keyring.gpg from the package ubuntu-dbgsym-keyring expired.
$ apt policy ubuntu-dbgsym-keyring
ubuntu-dbgsym-keyring:
Installed: 2020.02.11.2
Candidate: 2020.02.11.2
Version table:
*** 2020.02.11.2 500
500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages
500 http://archive.ubuntu.com/ubuntu focal/main i386 Packages
100 /var/lib/dpkg/status
$ gpg --no-default-keyring --keyring /usr/share/keyrings/ubuntu-dbgsym-keyring.gpg --list-keys
/usr/share/keyrings/ubuntu-dbgsym-keyring.gpg
---------------------------------------------
pub rsa4096 2016-03-21 [SC] [expired: 2021-03-20]
F2EDC64DC5AEE1F6B9C621F0C8CAB6595FDFF622
uid [ expired] Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
Error message on "apt update":
E: The repository 'http://ddebs.ubuntu.com bionic-updates Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ddebs.ubuntu.com bionic Release: The following signatures were invalid: EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
E: The repository 'http://ddebs.ubuntu.com bionic Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ddebs.ubuntu.com bionic-proposed Release: The following signatures were invalid: EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
E: The repository 'http://ddebs.ubuntu.com bionic-proposed Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details. |
|
2021-03-20 22:25:31 |
Pedro Victor Lourenço Fragola |
bug |
|
|
added subscriber Pedro Victor Lourenço Fragola |
2021-03-20 22:57:45 |
Dominique Poulain |
bug |
|
|
added subscriber Dominique Poulain |
2021-03-21 00:02:01 |
Launchpad Janitor |
ubuntu-keyring (Ubuntu): status |
New |
Confirmed |
|
2021-03-21 00:03:49 |
Nicholas Cole |
bug |
|
|
added subscriber Nicholas Cole |
2021-03-21 00:24:10 |
thedoctar |
bug |
|
|
added subscriber thedoctar |
2021-03-21 08:56:02 |
Trent Lloyd |
ubuntu-keyring (Ubuntu): importance |
Undecided |
Critical |
|
2021-03-21 08:56:23 |
Trent Lloyd |
ubuntu-keyring (Ubuntu): importance |
Critical |
High |
|
2021-03-21 12:00:16 |
thedoctar |
removed subscriber thedoctar |
|
|
|
2021-03-21 13:46:08 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Focal |
|
2021-03-21 13:46:08 |
Dimitri John Ledkov |
bug task added |
|
ubuntu-keyring (Ubuntu Focal) |
|
2021-03-21 13:46:08 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Groovy |
|
2021-03-21 13:46:08 |
Dimitri John Ledkov |
bug task added |
|
ubuntu-keyring (Ubuntu Groovy) |
|
2021-03-21 13:46:08 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Hirsute |
|
2021-03-21 13:46:08 |
Dimitri John Ledkov |
bug task added |
|
ubuntu-keyring (Ubuntu Hirsute) |
|
2021-03-21 13:46:08 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Bionic |
|
2021-03-21 13:46:08 |
Dimitri John Ledkov |
bug task added |
|
ubuntu-keyring (Ubuntu Bionic) |
|
2021-03-21 13:46:14 |
Dimitri John Ledkov |
ubuntu-keyring (Ubuntu Hirsute): importance |
High |
Critical |
|
2021-03-21 13:46:17 |
Dimitri John Ledkov |
ubuntu-keyring (Ubuntu Focal): importance |
Undecided |
Critical |
|
2021-03-21 13:46:20 |
Dimitri John Ledkov |
ubuntu-keyring (Ubuntu Bionic): importance |
Undecided |
Critical |
|
2021-03-21 13:46:22 |
Dimitri John Ledkov |
ubuntu-keyring (Ubuntu Groovy): importance |
Undecided |
Critical |
|
2021-03-21 13:47:05 |
Launchpad Janitor |
ubuntu-keyring (Ubuntu Bionic): status |
New |
Confirmed |
|
2021-03-21 13:47:05 |
Launchpad Janitor |
ubuntu-keyring (Ubuntu Focal): status |
New |
Confirmed |
|
2021-03-21 13:47:05 |
Launchpad Janitor |
ubuntu-keyring (Ubuntu Groovy): status |
New |
Confirmed |
|
2021-03-21 16:50:45 |
Dan Streetman |
bug |
|
|
added subscriber Dan Streetman |
2021-03-22 15:35:19 |
Rik Mills |
bug |
|
|
added subscriber Rik Mills |
2021-03-22 22:19:20 |
Vadim Zeitlin |
bug |
|
|
added subscriber Vadim Zeitlin |
2021-03-23 00:43:49 |
Launchpad Janitor |
ubuntu-keyring (Ubuntu Hirsute): status |
Confirmed |
Fix Released |
|
2021-03-25 07:24:35 |
Fiona Klute |
bug |
|
|
added subscriber Fiona Klute |
2021-03-25 18:08:15 |
Dimitri John Ledkov |
description |
The public key used by the debugging symbols repository /usr/share/keyrings/ubuntu-dbgsym-keyring.gpg from the package ubuntu-dbgsym-keyring expired.
$ apt policy ubuntu-dbgsym-keyring
ubuntu-dbgsym-keyring:
Installed: 2020.02.11.2
Candidate: 2020.02.11.2
Version table:
*** 2020.02.11.2 500
500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages
500 http://archive.ubuntu.com/ubuntu focal/main i386 Packages
100 /var/lib/dpkg/status
$ gpg --no-default-keyring --keyring /usr/share/keyrings/ubuntu-dbgsym-keyring.gpg --list-keys
/usr/share/keyrings/ubuntu-dbgsym-keyring.gpg
---------------------------------------------
pub rsa4096 2016-03-21 [SC] [expired: 2021-03-20]
F2EDC64DC5AEE1F6B9C621F0C8CAB6595FDFF622
uid [ expired] Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
Error message on "apt update":
E: The repository 'http://ddebs.ubuntu.com bionic-updates Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ddebs.ubuntu.com bionic Release: The following signatures were invalid: EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
E: The repository 'http://ddebs.ubuntu.com bionic Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ddebs.ubuntu.com bionic-proposed Release: The following signatures were invalid: EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
E: The repository 'http://ddebs.ubuntu.com bionic-proposed Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details. |
[Impact]
* Cannot update apt metadata from ddebs.ubuntu.com whilst using ubuntu-dbgsym-keyring package
[Test Plan]
* Install ubuntu-dbgsym-keyring package
* Add ddebs.ubuntu.com repository for your release
* sudo apt update must be successful
[Where problems could occur]
* At the moment the signature was bumped by one year
* Meaning this issue will occur again in 2022
* Instead the key must be set to not expire & new round of SRUs issued
[Other Info]
* Original bug report
The public key used by the debugging symbols repository /usr/share/keyrings/ubuntu-dbgsym-keyring.gpg from the package ubuntu-dbgsym-keyring expired.
$ apt policy ubuntu-dbgsym-keyring
ubuntu-dbgsym-keyring:
Installed: 2020.02.11.2
Candidate: 2020.02.11.2
Version table:
*** 2020.02.11.2 500
500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages
500 http://archive.ubuntu.com/ubuntu focal/main i386 Packages
100 /var/lib/dpkg/status
$ gpg --no-default-keyring --keyring /usr/share/keyrings/ubuntu-dbgsym-keyring.gpg --list-keys
/usr/share/keyrings/ubuntu-dbgsym-keyring.gpg
---------------------------------------------
pub rsa4096 2016-03-21 [SC] [expired: 2021-03-20]
F2EDC64DC5AEE1F6B9C621F0C8CAB6595FDFF622
uid [ expired] Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
Error message on "apt update":
E: The repository 'http://ddebs.ubuntu.com bionic-updates Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ddebs.ubuntu.com bionic Release: The following signatures were invalid: EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
E: The repository 'http://ddebs.ubuntu.com bionic Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ddebs.ubuntu.com bionic-proposed Release: The following signatures were invalid: EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
E: The repository 'http://ddebs.ubuntu.com bionic-proposed Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details. |
|
2021-03-25 18:16:41 |
Dimitri John Ledkov |
ubuntu-keyring (Ubuntu Groovy): status |
Confirmed |
In Progress |
|
2021-03-25 19:05:27 |
Brian Murray |
ubuntu-keyring (Ubuntu Groovy): status |
In Progress |
Fix Committed |
|
2021-03-25 19:05:30 |
Brian Murray |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
2021-03-25 19:05:33 |
Brian Murray |
bug |
|
|
added subscriber SRU Verification |
2021-03-25 19:05:40 |
Brian Murray |
tags |
sts |
sts verification-needed verification-needed-groovy |
|
2021-03-25 19:59:25 |
Dimitri John Ledkov |
ubuntu-keyring (Ubuntu Focal): status |
Confirmed |
In Progress |
|
2021-03-25 19:59:29 |
Dimitri John Ledkov |
ubuntu-keyring (Ubuntu Bionic): status |
Confirmed |
In Progress |
|
2021-03-25 20:50:27 |
Brian Murray |
ubuntu-keyring (Ubuntu Focal): status |
In Progress |
Fix Committed |
|
2021-03-25 20:50:41 |
Brian Murray |
tags |
sts verification-needed verification-needed-groovy |
sts verification-needed verification-needed-focal verification-needed-groovy |
|
2021-03-25 20:52:05 |
Brian Murray |
ubuntu-keyring (Ubuntu Bionic): status |
In Progress |
Fix Committed |
|
2021-03-25 20:52:18 |
Brian Murray |
tags |
sts verification-needed verification-needed-focal verification-needed-groovy |
sts verification-needed verification-needed-bionic verification-needed-focal verification-needed-groovy |
|
2021-03-26 17:18:46 |
Brian Murray |
tags |
sts verification-needed verification-needed-bionic verification-needed-focal verification-needed-groovy |
sts verification-done-bionic verification-needed verification-needed-focal verification-needed-groovy |
|
2021-03-26 23:40:46 |
Dimitri John Ledkov |
ubuntu-keyring (Ubuntu Hirsute): status |
Fix Released |
Fix Committed |
|
2021-03-27 07:26:09 |
Václav Haisman |
bug |
|
|
added subscriber Václav Haisman |
2021-03-27 22:12:20 |
Nicholas Cole |
removed subscriber Nicholas Cole |
|
|
|
2021-03-27 23:18:00 |
Launchpad Janitor |
ubuntu-keyring (Ubuntu Hirsute): status |
Fix Committed |
Fix Released |
|
2021-03-29 03:59:29 |
ash |
bug |
|
|
added subscriber Ash Holland |
2021-03-29 11:59:07 |
Rik Mills |
tags |
sts verification-done-bionic verification-needed verification-needed-focal verification-needed-groovy |
sts verification-done-bionic verification-done-focal verification-needed verification-needed-groovy |
|
2021-03-29 14:31:28 |
Dimitri John Ledkov |
description |
[Impact]
* Cannot update apt metadata from ddebs.ubuntu.com whilst using ubuntu-dbgsym-keyring package
[Test Plan]
* Install ubuntu-dbgsym-keyring package
* Add ddebs.ubuntu.com repository for your release
* sudo apt update must be successful
[Where problems could occur]
* At the moment the signature was bumped by one year
* Meaning this issue will occur again in 2022
* Instead the key must be set to not expire & new round of SRUs issued
[Other Info]
* Original bug report
The public key used by the debugging symbols repository /usr/share/keyrings/ubuntu-dbgsym-keyring.gpg from the package ubuntu-dbgsym-keyring expired.
$ apt policy ubuntu-dbgsym-keyring
ubuntu-dbgsym-keyring:
Installed: 2020.02.11.2
Candidate: 2020.02.11.2
Version table:
*** 2020.02.11.2 500
500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages
500 http://archive.ubuntu.com/ubuntu focal/main i386 Packages
100 /var/lib/dpkg/status
$ gpg --no-default-keyring --keyring /usr/share/keyrings/ubuntu-dbgsym-keyring.gpg --list-keys
/usr/share/keyrings/ubuntu-dbgsym-keyring.gpg
---------------------------------------------
pub rsa4096 2016-03-21 [SC] [expired: 2021-03-20]
F2EDC64DC5AEE1F6B9C621F0C8CAB6595FDFF622
uid [ expired] Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
Error message on "apt update":
E: The repository 'http://ddebs.ubuntu.com bionic-updates Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ddebs.ubuntu.com bionic Release: The following signatures were invalid: EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
E: The repository 'http://ddebs.ubuntu.com bionic Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ddebs.ubuntu.com bionic-proposed Release: The following signatures were invalid: EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
E: The repository 'http://ddebs.ubuntu.com bionic-proposed Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details. |
[Impact]
* Cannot update apt metadata from ddebs.ubuntu.com whilst using ubuntu-dbgsym-keyring package
[Test Plan]
* Install ubuntu-dbgsym-keyring package
* Add ddebs.ubuntu.com repository for your release
* sudo apt update must be successful
* Install ubuntu-dbgsym-keyring package
* Install and use `apt-key list` and check that there is no expiry on the dbgsym key
I.e. bad output
/etc/apt/trusted.gpg.d/ubuntu-keyring-2016-dbgsym.gpg
-----------------------------------------------------
pub rsa4096 2016-03-21 [SC] [expired: 2021-03-20]
F2ED C64D C5AE E1F6 B9C6 21F0 C8CA B659 5FDF F622
uid [ expired] Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
Good output has no [date] in the pub line.
[Where problems could occur]
* At the moment the signature was bumped by one year
* Meaning this issue will occur again in 2022
* Instead the key must be set to not expire & new round of SRUs issued
[Other Info]
* Original bug report
The public key used by the debugging symbols repository /usr/share/keyrings/ubuntu-dbgsym-keyring.gpg from the package ubuntu-dbgsym-keyring expired.
$ apt policy ubuntu-dbgsym-keyring
ubuntu-dbgsym-keyring:
Installed: 2020.02.11.2
Candidate: 2020.02.11.2
Version table:
*** 2020.02.11.2 500
500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages
500 http://archive.ubuntu.com/ubuntu focal/main i386 Packages
100 /var/lib/dpkg/status
$ gpg --no-default-keyring --keyring /usr/share/keyrings/ubuntu-dbgsym-keyring.gpg --list-keys
/usr/share/keyrings/ubuntu-dbgsym-keyring.gpg
---------------------------------------------
pub rsa4096 2016-03-21 [SC] [expired: 2021-03-20]
F2EDC64DC5AEE1F6B9C621F0C8CAB6595FDFF622
uid [ expired] Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
Error message on "apt update":
E: The repository 'http://ddebs.ubuntu.com bionic-updates Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ddebs.ubuntu.com bionic Release: The following signatures were invalid: EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
E: The repository 'http://ddebs.ubuntu.com bionic Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ddebs.ubuntu.com bionic-proposed Release: The following signatures were invalid: EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
E: The repository 'http://ddebs.ubuntu.com bionic-proposed Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details. |
|
2021-03-29 16:44:12 |
Brian Murray |
tags |
sts verification-done-bionic verification-done-focal verification-needed verification-needed-groovy |
sts verification-done-bionic verification-needed verification-needed-focal verification-needed-groovy |
|
2021-03-29 16:45:16 |
Brian Murray |
tags |
sts verification-done-bionic verification-needed verification-needed-focal verification-needed-groovy |
sts verification-needed verification-needed-bionic verification-needed-focal verification-needed-groovy |
|
2021-03-29 17:37:18 |
Fiona Klute |
tags |
sts verification-needed verification-needed-bionic verification-needed-focal verification-needed-groovy |
sts verification-done-groovy verification-needed verification-needed-bionic verification-needed-focal |
|
2021-03-30 19:15:54 |
Brian Murray |
tags |
sts verification-done-groovy verification-needed verification-needed-bionic verification-needed-focal |
sts verification-done-bionic verification-done-groovy verification-needed verification-needed-focal |
|
2021-03-30 19:21:59 |
Brian Murray |
tags |
sts verification-done-bionic verification-done-groovy verification-needed verification-needed-focal |
sts verification-done verification-done-bionic verification-done-focal verification-done-groovy |
|
2021-03-30 20:06:24 |
Matthieu Clemenceau |
tags |
sts verification-done verification-done-bionic verification-done-focal verification-done-groovy |
fr-1216 sts verification-done verification-done-bionic verification-done-focal verification-done-groovy |
|
2021-03-31 15:51:40 |
Launchpad Janitor |
ubuntu-keyring (Ubuntu Groovy): status |
Fix Committed |
Fix Released |
|
2021-03-31 15:51:44 |
Brian Murray |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
2021-03-31 15:52:02 |
Launchpad Janitor |
ubuntu-keyring (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
2021-03-31 15:55:09 |
Launchpad Janitor |
ubuntu-keyring (Ubuntu Bionic): status |
Fix Committed |
Fix Released |
|
2021-04-14 09:56:51 |
Oded Arbel |
bug |
|
|
added subscriber Oded Arbel |
2021-05-07 06:52:26 |
Patrick Freeman |
bug |
|
|
added subscriber Patrick Freeman |
2022-09-06 13:52:23 |
thedoctar |
bug |
|
|
added subscriber thedoctar |
2022-09-06 15:45:15 |
Dan Streetman |
removed subscriber Dan Streetman |
|
|
|