I was able to verify the trust path entirely by hand, starting with the
http://pl.archive.ubuntu.com/ubuntu/dists/precise/Release and
http://pl.archive.ubuntu.com/ubuntu/dists/precise/Release.gpg files,
downloading the precise amd64 lame package, and verifying that the
sha256 for the downloaded package is
378656d3725af0541bf9ecc6439d43172b9f5fc8eb7b66ec5bf37b3211cfc842 as
listed in the http://pl.archive.ubuntu.com/ubuntu/dists/precise/universe
/binary-amd64/Packages.bz2 file.
Do you have the correct ubuntu-keyring package installed for your
release?
Thanks
** Information type changed from Private Security to Public Security
** Changed in: lame (Ubuntu)
Status: New => Incomplete
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lame in Ubuntu.
https://bugs.launchpad.net/bugs/1397462
Title:
Latest "lame" package is unsigned (security risk)
Status in lame package in Ubuntu:
Incomplete
Bug description:
Package lame is not signed with trusted key:
sudo apt-get install lame
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
lame
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 214 kB of archives.
After this operation, 478 kB of additional disk space will be used.
WARNING: The following packages cannot be authenticated!
lame
Install these packages without verification [y/N]?
Package: lame
Versions:
3.99.3+repack1-1
(/var/lib/apt/lists/pl.archive.ubuntu.com_ubuntu_dists_precise_universe_binary-amd64_Packages)
Description Language:
File:
/var/lib/apt/lists/pl.archive.ubuntu.com_ubuntu_dists_precise_universe_binary-amd64_Packages
MD5: 4431b658087daa9f608d08daeeaa135b
Description Language: en
File:
/var/lib/apt/lists/pl.archive.ubuntu.com_ubuntu_dists_precise_universe_i18n_Translation-en
MD5: 4431b658087daa9f608d08daeeaa135b
Ubuntu 12.04.5 LT
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lame/+bug/1397462/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
