[11:07] GPG issue https://www.openwall.com/lists/oss-security/2022/06/30/1 [12:13] pabs3: Thanks a lot for the link, nasty one. [12:14] yeah, on another channel it was mentioned that Launchpad PPAs might be vulnerable to this [12:14] pabs3: Do you happen to understand how control of a secret key is important? The introduction mentions it, but the details don't. [12:16] I don't sorry. maybe you need a valid signature, which then gets misinterpreted for some reason? [12:16] Oh, I misparsed the text as saying the secret part needed to be in the keyring. [12:16] Nevermind, I see now.