| === oerheks1 is now known as oerheks | ||
| sakrecoer | re: gpg i seem to have som stale lockfile preventing gpg from being invoked by anything.. | 13:41 |
|---|---|---|
| sakrecoer | https://tech.michaelaltfield.net/2019/07/14/mitigating-poisoned-pgp-certificates/ i think it is this... | 13:46 |
| sakrecoer | arf... | 13:46 |
| sakrecoer | seems to be keyid:79BE3E4300411886 Linus Torvald :( | 15:18 |
| sakrecoer | takes forever to delete it also... | 15:19 |
| tomreyn | sakrecoer: https://bugs.launchpad.net/ubuntu/+source/gnupg2/+bug/1844059 | 18:33 |
| ubottu | Launchpad bug 1844059 in gnupg2 (Ubuntu) "Please apply mitigations for CVE-2019-13050" [Undecided,Confirmed] | 18:33 |
| tomreyn | "the specific updates to address this are not complete so" ... the ubuntu packages remain unfixed for now. | 18:35 |
| tomreyn | and then there is https://bugs.launchpad.net/ubuntu/+source/gnupg2/+bug/1844055 in Ubuntu which is why you cannot use the only 'safe' keyserver there is now | 18:37 |
| ubottu | Launchpad bug 1844055 in gnupg2 (Ubuntu) "Importing public key from keys.openpgp.org fails with "no user ID" " [Undecided,Confirmed] | 18:37 |
| sakrecoer[m] | Thanks, Tomreyn! :) | 18:43 |
| sakrecoer[m] | I suppose I will just have to unsubscribe until the fix is out. | 18:47 |
| tomreyn | sakrecoer[m]: to unsubscribe from what? | 18:49 |
| sakrecoer | the keyservers | 18:49 |
| tomreyn | oh, right, no longer using keyservers or importing keys or signatures will prevent your keyring from becoming infected. | 18:54 |
| tomreyn | it will, of course, also make it impossible to use gpg in a safe manner where you'd need to regularly update all the keys in your public keyring to not miss out on revocations and to get copies of keys whose expiry was extended. | 18:55 |
| sakrecoer | yes, i imagine this is a pretty serious issue for quirte a few production environements | 18:56 |
| sakrecoer | but the few people and projects where i use gpg are small enough to be able to verify eachother without server | 18:57 |
| sakrecoer | ^ not sure why i had torvalds key though lol :) i've probably sent fanmail haha! | 19:02 |
| tomreyn | maybe you tried to verify the authenticity of his git commits | 19:08 |
| studiobot | <designbybeck> If I install 19.04, I can update to 19.10 via software update? | 21:12 |
| studiobot | <designbybeck> Studio | 21:12 |
| sakrecoer | @designbybeck yes | 22:02 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!