Package: parcimonie Version: 0.5.1-3 Severity: normal parcimonie seems to look up keys using less than half of the fingerprint (last 8 bytes of the fingerprint). This is better than just using the key id (last 4 bytes of the fingerprint), but it would be preferable to use the full fingerprint to reduce the likelihood of extraneous keys being downloaded and added to a user's keyring.
PS: I filed #636943 about the libtorsocks warnings. pabs@chianamo:~$ gpg --fingerprint FCD79DC0B53322BE pub 1024D/B53322BE 2003-05-02 Key fingerprint = 4A65 A89E 2F27 8CC5 E7CB 9ACD FCD7 9DC0 B533 22BE uid Paolo Cavallini (PC) <cavall...@faunalia.it> uid [jpeg image of size 8383] sub 1024g/4003F0AF 2003-05-02 pabs@chianamo:~$ parcimonie start --verbose -f Using ControlSocket /var/run/tor/control to connect to Tor. Using cookie '/var/run/tor/control.authcookie' to authenticate to Tor. 12:34:28 libtorsocks(1104): The symbol res_init() was not found in any shared library. The error reported was: not found! 12:34:28 libtorsocks(1104): The symbol res_query() was not found in any shared library. The error reported was: not found! 12:34:28 libtorsocks(1104): The symbol res_search() was not found in any shared library. The error reported was: not found! 12:34:28 libtorsocks(1104): The symbol res_send() was not found in any shared library. The error reported was: not found! 12:34:28 libtorsocks(1104): The symbol res_querydomain() was not found in any shared library. The error reported was: not found! 12:34:28 libtorsocks(1104): The symbol res_init() was not found in any shared library. The error reported was: not found! 12:34:28 libtorsocks(1104): The symbol res_query() was not found in any shared library. The error reported was: not found! 12:34:28 libtorsocks(1104): The symbol res_search() was not found in any shared library. The error reported was: not found! 12:34:28 libtorsocks(1104): The symbol res_send() was not found in any shared library. The error reported was: not found! 12:34:28 libtorsocks(1104): The symbol res_querydomain() was not found in any shared library. The error reported was: not found! Using 1440 seconds as average sleep time. Connected to the Tor ControlSocket. Sending authentication cookie... Authentication successful. Asking a new nym... NEWNYM request accepted. tryRecvKey: trying to fetch FCD79DC0B53322BE 12:34:29 libtorsocks(1108): The symbol res_init() was not found in any shared library. The error reported was: not found! 12:34:29 libtorsocks(1108): The symbol res_query() was not found in any shared library. The error reported was: not found! 12:34:29 libtorsocks(1108): The symbol res_search() was not found in any shared library. The error reported was: not found! 12:34:29 libtorsocks(1108): The symbol res_send() was not found in any shared library. The error reported was: not found! 12:34:29 libtorsocks(1108): The symbol res_querydomain() was not found in any shared library. The error reported was: not found! 12:34:29 libtorsocks(1108): The symbol res_init() was not found in any shared library. The error reported was: not found! 12:34:29 libtorsocks(1108): The symbol res_query() was not found in any shared library. The error reported was: not found! 12:34:29 libtorsocks(1108): The symbol res_search() was not found in any shared library. The error reported was: not found! 12:34:29 libtorsocks(1108): The symbol res_send() was not found in any shared library. The error reported was: not found! 12:34:29 libtorsocks(1108): The symbol res_querydomain() was not found in any shared library. The error reported was: not found! 12:34:29 libtorsocks(1108): The symbol res_query() was not found in any shared library. The error reported was: not found! 12:34:29 libtorsocks(1108): The symbol res_query() was not found in any shared library. The error reported was: not found! 12:34:29 libtorsocks(1108): Unresolved symbol: res_query -- System Information: Debian Release: wheezy/sid APT prefers testing APT policy: (700, 'testing'), (600, 'unstable'), (550, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 3.0.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages parcimonie depends on: ii libclone-perl 0.31-1+b1 recursively copy Perl datatypes ii libconfig-general-perl 2.50-1 Generic Configuration Module ii libfile-homedir-perl 0.97-1 Perl module for finding user direc ii libfile-spec-perl 3.3300-1+b1 collection of tools for working wi ii libfile-which-perl 1.08-1 Perl module for searching paths fo ii libglib-perl 2:1.223-1+b1 interface to the GLib and GObject ii libgnupg-interface-perl 0.44-1 Perl interface to GnuPG ii libgtk2-perl 2:1.223-1+b1 Perl interface to the 2.x series o ii liblist-moreutils-perl 0.32-1 Perl module with additional list f ii libmoose-perl 2.0010-1 modern Perl object system framewor ii libmoosex-daemonize-perl 0.13-1 role for daemonizing your Moose ba ii libmoosex-declare-perl 0.34-1 Moose extension providing a declar ii libmoosex-getopt-perl 0.37-1 Moose extension for processing com ii libmoosex-strictconstructor 0.16-1 Make your object constructors blow ii libmoosex-types-netaddr-ip- 0.04-1 Moose extension for NetAddr::IP ty ii libmoosex-types-path-class- 0.05-2 Path::Class type library for Moose ii libmoosex-types-perl 0.27-1 Moose extension to organise types ii libnet-dbus-glib-perl 0.33.0-1+b1 extension for the DBus GLib bindin ii libnet-dbus-perl 0.33.6-2+b1 Extension for the DBus bindings ii libpath-class-perl 0.24-1 module for cross-platform path spe ii libtie-cache-perl 0.17-4 perl Tie::Cache - LRU Cache in Mem ii libtime-duration-parse-perl 0.06-1 Parse string that represents time ii libtry-tiny-perl 0.09-1 module providing minimalistic try/ ii perl 5.12.4-1 Larry Wall's Practical Extraction ii perl-modules [libfile-spec- 5.12.4-1 Core Perl modules ii torsocks 1.1-4 use socks-friendly applications wi Versions of packages parcimonie recommends: ii gnupg-curl 1.4.11-3 GNU privacy guard - a free PGP rep ii tor 0.2.2.30-rc-1 anonymizing overlay network for TC -- bye, pabs http://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part