Le Vendredi 3 Mars 2006 22:24, Joerg Jaspert a écrit : > On 10582 March 1977, [EMAIL PROTECTED] wrote: > > Yes but we can't wait anymore because apt is unusable > > Wrong. apt is not unusable. Some random extra tools may not work > anymore, but thats a different story. apt, aptitude and all those things > in sarge do not care about that, so yes, it can wait for a new point > release. > > > Except if you are using apt-check-sigs system... This mean that it had to > > be fixed for yesterday. > > No. Dont use an external tool...
The only point is that I can't risk any risk of compromise servers. So to my point of view apt is not usable anymore since the sigs are not valid. To my mind Debian is some of the most reliable distrib because it's stable and a lot of time is spent to keep the distrib as secure as possible. The question of sigs for package was a major lack of the apt system but solve in futur stable release. But for sarge the only solution is to use apt-check-sigs. I can't figure out how apt-check-sigs can be considerated as a so external, random (and useless?) tool for sarge. There was an explicit problem of anticipation on this issue, and It's maybe a bite "strange" to wait for an unscheduled (I mean no exact date) PR. We've been waiting for weeks now, so true that we can way few more but it's sad for the seriousness of the distrib I think. Xavier
