Re: [SECURITY] [DSA 411-1] New mpg321 packages fix format string vulnerability - PGP key?

[Matt Zimmerman <mdz@debian.org>]

On Mon, Jan 05, 2004 at 10:37:49PM -0700, s. keeling wrote:

> Incoming from Matt Zimmerman:
> > Debian Security Advisory DSA 411-1                     security@debian.org
> > http://www.debian.org/security/                             Matt Zimmerman
> > January 5th, 2004                       http://www.debian.org/security/faq
> > 
> > Package        : mpg321
> > Vulnerability  : format string
> > Problem-Type   : remote
> > Debian-specific: no
> > CVE Ids        : CAN-2003-0969
> 
> Were any of you able to verify the PGP signatures on the latest
> debian-security-announce messages?  I can't:
> 
>   [-- PGP output follows (current time: Mon 05 Jan 2004 10:30:43 PM MST) --]
>   gpg: Signature made Mon 05 Jan 2004 07:51:35 PM MST using DSA key ID 43E25D1E
>   gpg: Can't check signature: public key not found
>   [-- End of PGP output --]

wget -O- http://www.debian.org/security/keys.txt | gpg --import

-- 
 - mdz