On Thu, Nov 30, 2006 at 11:43:12PM +0100, Peter Palfrader wrote: > Package: debian-archive-keyring > Version: 2006.11.22 > Severity: serious > > debian-archive-keyring does not depent on an apt that comes with > apt-key, so in the course of upgrading from sarge to etch one can > end up with a system that has only two keys in apt's keyring, > the signing keys from 2005 and 2006 which are shipped with apt itself.
In my opinion, since apt depends debian-archive-keyring, the proper fix is to do 'apt-key update' in apt postinst (in supplement to doing it in debian-archive-keyring postinst). Adding a dependency on apt to debian-archive-keyring would create a circular dependency and would not fix the problem. This bug is similar to #400935. Cheers, -- Bill. <[EMAIL PROTECTED]> Imagine a large blue swirl here. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
