Bug#900236: marked as done (tlmgr manpage: 32-bit OpenPGP key IDs)
Your message dated Tue, 24 Jul 2018 08:47:54 +0000
with message-id <E1fhsz4-0004Xr-6u@fasolo.debian.org>
and subject line Bug#900236: fixed in texlive-base 2018.20180724-1
has caused the Debian Bug report #900236,
regarding tlmgr manpage: 32-bit OpenPGP key IDs
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
900236: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900236
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: submit@bugs.debian.org
- Subject: tlmgr manpage: 32-bit OpenPGP key IDs
- From: Jakub Wilk <jwilk@jwilk.net>
- Date: Sun, 27 May 2018 23:13:34 +0200
- Message-id: <20180527211334.lh7ozdyxhnavxeor@jwilk.net>
Package: texlive-base
Version: 2018.20180505-1
The tlmgr(1) manual page reads:
The signature is created by the TeX Live Distribution GPG key
0x06BAB6BC, which in turn is signed by Karl Berry’s key 0x30D155AD and
Norbert Preining’s key 0x6CACA448.
Please don't use 32-bit OpenPGP key IDs. It's computationally trivial to
generate a new key with chosen short ID. Please use 64-bit key IDs, or,
even better, full fingerprints.
In fact, if you request the 0x30D155AD key from a keyserver, you will
get _two_ keys; one of them is presumable a sham key originating from
<https://evil32.com/>.
OTOH, there's no 0x6CACA448 key on keyservers. An attacker could upload
their own key with such ID without rising much suspicion.
--
Jakub Wilk
--- End Message ---
--- Begin Message ---
Source: texlive-base
Source-Version: 2018.20180724-1
We believe that the bug you reported is fixed in the latest version of
texlive-base, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 900236@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Norbert Preining <preining@debian.org> (supplier of updated texlive-base package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 24 Jul 2018 10:09:29 +0900
Source: texlive-base
Binary: texlive-base texlive-latex-base texlive-latex-recommended texlive-fonts-recommended texlive-pictures texlive-luatex texlive-metapost texlive-xetex texlive-lang-african texlive-lang-indic texlive-generic-recommended texlive-generic-extra texlive-plain-extra texlive-htmlxml texlive-omega luasseq prosper texlive texlive-full texlive-fonts-recommended-doc texlive-latex-base-doc texlive-latex-recommended-doc texlive-metapost-doc texlive-pictures-doc
Architecture: source all
Version: 2018.20180724-1
Distribution: unstable
Urgency: medium
Maintainer: Debian TeX Maintainers <debian-tex-maint@lists.debian.org>
Changed-By: Norbert Preining <preining@debian.org>
Description:
luasseq - TeX Live: transitional dummy package
prosper - TeX Live: transitional dummy package
texlive - TeX Live: A decent selection of the TeX Live packages
texlive-base - TeX Live: Essential programs and files
texlive-fonts-recommended - TeX Live: Recommended fonts
texlive-fonts-recommended-doc - TeX Live: Documentation files for texlive-fonts-recommended
texlive-full - TeX Live: metapackage pulling in all components of TeX Live
texlive-generic-extra - TeX Live: transitional dummy package
texlive-generic-recommended - TeX Live: transitional dummy package
texlive-htmlxml - TeX Live: transitional dummy package
texlive-lang-african - TeX Live: transitional dummy package
texlive-lang-indic - TeX Live: transitional dummy package
texlive-latex-base - TeX Live: LaTeX fundamental packages
texlive-latex-base-doc - TeX Live: Documentation files for texlive-latex-base
texlive-latex-recommended - TeX Live: LaTeX recommended packages
texlive-latex-recommended-doc - TeX Live: Documentation files for texlive-latex-recommended
texlive-luatex - TeX Live: LuaTeX packages
texlive-metapost - TeX Live: MetaPost and Metafont packages
texlive-metapost-doc - TeX Live: Documentation files for texlive-metapost
texlive-omega - TeX Live: transitional dummy package
texlive-pictures - TeX Live: Graphics, pictures, diagrams
texlive-pictures-doc - TeX Live: Documentation files for texlive-pictures
texlive-plain-extra - TeX Live: transitional dummy package
texlive-xetex - TeX Live: XeTeX and packages
Closes: 900236
Changes:
texlive-base (2018.20180724-1) unstable; urgency=medium
.
* New upstream checkout
. use long gpg key ids in tlmgr man page (Closes: #900236)
Checksums-Sha1:
67517c0a5090dae86efa8d3a2a6fa84654583a4b 3192 texlive-base_2018.20180724-1.dsc
428604245a33ce3b534d720fe40d7f8cef7d0bee 315934608 texlive-base_2018.20180724.orig.tar.xz
aea0b710b307c0b51fe81eed310ccd54839d8b6a 13582316 texlive-base_2018.20180724-1.debian.tar.xz
7992a73e6e0ee0b930c99b95eba3fdb83a397e5e 31440 luasseq_2018.20180724-1_all.deb
73e0aedd02c00dc1e8f834da28cda0efb05ebd22 31432 prosper_2018.20180724-1_all.deb
7f38ab3722aa01d18c26ff5fc03b528bd3162e98 18891128 texlive-base_2018.20180724-1_all.deb
abdaa4d8f430d667aee9729be990f1ed09303a02 13576 texlive-base_2018.20180724-1_amd64.buildinfo
4e61f3e6a107a5e8dc02daa4bab85627c838f0be 2660672 texlive-fonts-recommended-doc_2018.20180724-1_all.deb
1c15fe58b749be1c8443e57e43bc1ff5b2632568 5293128 texlive-fonts-recommended_2018.20180724-1_all.deb
6de9c16bfbab570dfadd03bc2677b40fc45f60ef 32024 texlive-full_2018.20180724-1_all.deb
3880a7ae22dc4e0fb96d09c642331bb325c31d0f 31444 texlive-generic-extra_2018.20180724-1_all.deb
9cfc929117dd4580e86a60cd4a8957e11403bc36 31448 texlive-generic-recommended_2018.20180724-1_all.deb
bce5c1a799f2b6f671724bd5cb68bef0797b0c55 31524 texlive-htmlxml_2018.20180724-1_all.deb
a1df3cccb9bf9aef011b40ce875011c4738927c8 31444 texlive-lang-african_2018.20180724-1_all.deb
090100890d64facfc4e099ffc88175e1e071da60 31456 texlive-lang-indic_2018.20180724-1_all.deb
f82ade30d65bb34669d4c6405a1ad7dbea96a1ff 46352968 texlive-latex-base-doc_2018.20180724-1_all.deb
1c247ebf85d6c4a9011c72d851407bed348a9d4a 981728 texlive-latex-base_2018.20180724-1_all.deb
ad7ad676c3129bb5456f4e3600d2f9ba74116007 45469628 texlive-latex-recommended-doc_2018.20180724-1_all.deb
f259d10c339163903244ad737bebb09807f45f9d 15314692 texlive-latex-recommended_2018.20180724-1_all.deb
3480d89919bbe5e241ae88d9c28bf1367c35dc2c 8112672 texlive-luatex_2018.20180724-1_all.deb
33570f5613e19857aca1a3b249ce35b2460ad577 30325704 texlive-metapost-doc_2018.20180724-1_all.deb
68cda7a6219afd6225fece90a69722e53e29d0e9 462856 texlive-metapost_2018.20180724-1_all.deb
2821386ff75bca0636320333735ebe7fe04b2eec 31444 texlive-omega_2018.20180724-1_all.deb
202599229fe786371002f062d3865d253586cb2e 119914568 texlive-pictures-doc_2018.20180724-1_all.deb
8a4814889f369db5d1a9780a30f29e535d82d4a5 4122608 texlive-pictures_2018.20180724-1_all.deb
d0be59d81eec7af1d3d2ac1afedc49665ab779a3 31448 texlive-plain-extra_2018.20180724-1_all.deb
a0eb2e8ae2bf5be34ae6494c6e4138fbd30c207e 13168456 texlive-xetex_2018.20180724-1_all.deb
481e1439f0903b485492d10c7800dbc2340a0863 31892 texlive_2018.20180724-1_all.deb
Checksums-Sha256:
b3a1034357a1ef384c79373042f1dfb7dee334b17327ddaf971128120977b721 3192 texlive-base_2018.20180724-1.dsc
fa40c708333fba46cbb2bdd655d3b5473f6e97b0b28ef61ef0cb38f640eaffad 315934608 texlive-base_2018.20180724.orig.tar.xz
d62bd2380f34f47cbb781e2ac75b4f7f19a54763a474199f8f998f829bd965ee 13582316 texlive-base_2018.20180724-1.debian.tar.xz
a6f1cca4c3948067f9a20c329695043bc66de43bfaf40d2815ebf7881493e4b2 31440 luasseq_2018.20180724-1_all.deb
5c7257ffd54c068f7c134a49fdc47ee7a520bec0fb0b27280f8012bcb31dcfb5 31432 prosper_2018.20180724-1_all.deb
6efded108a90ce8bf5a7e1c41c664c4e7d01a3f4bd436ecbb5be483bc41c60e5 18891128 texlive-base_2018.20180724-1_all.deb
321d87e84b48ec7aa20b9ac0829c5dc6ba22a7e16c2a04fdbe1e82f7d35697b0 13576 texlive-base_2018.20180724-1_amd64.buildinfo
4fab4d9008d001d1b1a4ada40a94f87a7a00c0a9dc0332d2d1e3d7c3878866f6 2660672 texlive-fonts-recommended-doc_2018.20180724-1_all.deb
d1884afecd08e80b143aa79655d8863cee961191aeb7137fd5bd6a56daa76f20 5293128 texlive-fonts-recommended_2018.20180724-1_all.deb
d4b154dd365f79e66fcdd34f28204f5d42b706af2f704bd5c58dee0a9580b583 32024 texlive-full_2018.20180724-1_all.deb
f82f877c846c74e690e99e92c2c7f682854ed401e97861deb8f5bac958fe41c1 31444 texlive-generic-extra_2018.20180724-1_all.deb
f5678a53e2abe2b7713323fc6f7e7c77f36d42feb92d3618d882902ddac6da0e 31448 texlive-generic-recommended_2018.20180724-1_all.deb
f5961cc1d7435d2e815cfde1a33da853e3f82ad11c90dfc0fabe25e2265050f8 31524 texlive-htmlxml_2018.20180724-1_all.deb
406b139ac2993e8525306384426977fb231ef2bd02a1ce37ddfdb0cd0e67ca0a 31444 texlive-lang-african_2018.20180724-1_all.deb
769f0def7a7869400824eb432f4529996f061552ed441633d7111cde9b800b37 31456 texlive-lang-indic_2018.20180724-1_all.deb
dbcff0b44012d7110156943c17ff8e89e6ee5d2899d4fc76500c0d70390cc6b7 46352968 texlive-latex-base-doc_2018.20180724-1_all.deb
e6940bdacf661cbd9497cb2ba0fe5b8f50ed1e8d5b450efbe270f3238fbc3782 981728 texlive-latex-base_2018.20180724-1_all.deb
95d1947a9d30d85213a50880b10a71211d99900ce54924b5d1910d4406c22017 45469628 texlive-latex-recommended-doc_2018.20180724-1_all.deb
db007384cad6273a808a7dafe8a1e6d4ced392629426ba02e9f30d15394e80f8 15314692 texlive-latex-recommended_2018.20180724-1_all.deb
ee9b4284249c89383d9af41ee4615592deeb19513a86447c9e54e6710e8c8185 8112672 texlive-luatex_2018.20180724-1_all.deb
80a70c999c3526e26499f00ab2a0dd46b5495edb120cc187b6c9c221f2a365b6 30325704 texlive-metapost-doc_2018.20180724-1_all.deb
b1569e22b94ddb31d42fee9d697c8eed72018bcda91aa7d792866dadefb19510 462856 texlive-metapost_2018.20180724-1_all.deb
435de8eb122bb6ffbc25892f0e13282e903d92c56dbf420b47a4630c72fbd379 31444 texlive-omega_2018.20180724-1_all.deb
d360f78161c79e1e7717eb2a70edb439d4870a40ce60f75976f2db2ffa787e75 119914568 texlive-pictures-doc_2018.20180724-1_all.deb
252c398672dfe4ee18d56a725d798d2c2237e4a78a453799d9259c869a3424a1 4122608 texlive-pictures_2018.20180724-1_all.deb
4bfc5ae89e0e3a5211ce67683e85439ebcdf73f6cd0b69196c0657974551527a 31448 texlive-plain-extra_2018.20180724-1_all.deb
fec4a6a192af8a52cf1d0cda121cabcfef9a13e9dde49d0ded9df0f4fac7a9f2 13168456 texlive-xetex_2018.20180724-1_all.deb
6d2f95da27a57166d1af96fd4186da0eaf243bf2b750b8f25b4d25fff457f536 31892 texlive_2018.20180724-1_all.deb
Files:
74e74d9028476d7417080f7978552529 3192 tex optional texlive-base_2018.20180724-1.dsc
cb105064beddf5503235113b391f5d07 315934608 tex optional texlive-base_2018.20180724.orig.tar.xz
03799d3981ba52a3e41d6d93615c537c 13582316 tex optional texlive-base_2018.20180724-1.debian.tar.xz
93d22272f755af8ba645b396250472b3 31440 oldlibs optional luasseq_2018.20180724-1_all.deb
74ea41e8f6a3a7e506fdcd6659db3bf0 31432 oldlibs optional prosper_2018.20180724-1_all.deb
e4e55218cd0c4e0e05d9b587720d8e95 18891128 tex optional texlive-base_2018.20180724-1_all.deb
40767c49361382f9fe18b04bded4f3d9 13576 tex optional texlive-base_2018.20180724-1_amd64.buildinfo
9ad5b953f864727483414dd0690cdc4a 2660672 doc optional texlive-fonts-recommended-doc_2018.20180724-1_all.deb
d77456415a38ecefa9123e8dfc3be3e8 5293128 fonts optional texlive-fonts-recommended_2018.20180724-1_all.deb
bcd672911995d22e106d5a513fce237e 32024 tex optional texlive-full_2018.20180724-1_all.deb
38437603649fbe5ca4bc1dfda567b35e 31444 oldlibs optional texlive-generic-extra_2018.20180724-1_all.deb
32f1f52ad477c560942b80004c1cbbdb 31448 oldlibs optional texlive-generic-recommended_2018.20180724-1_all.deb
3b8ebc1edd79dfd24aa3c625d4f1804d 31524 oldlibs optional texlive-htmlxml_2018.20180724-1_all.deb
50245faed1ac17e6fa5a3a8ac1acf545 31444 oldlibs optional texlive-lang-african_2018.20180724-1_all.deb
1a2c0924164ac744ac0731529232681e 31456 oldlibs optional texlive-lang-indic_2018.20180724-1_all.deb
7e8e395c26217f15c765f2b2412c5e10 46352968 doc optional texlive-latex-base-doc_2018.20180724-1_all.deb
af1ec7f5e643d3f55537ce8497313d04 981728 tex optional texlive-latex-base_2018.20180724-1_all.deb
8ff35d1d4e8b8fbd2f58f922603871e7 45469628 doc optional texlive-latex-recommended-doc_2018.20180724-1_all.deb
3bb51e1cbc8db9ea52b699c86dab6d91 15314692 tex optional texlive-latex-recommended_2018.20180724-1_all.deb
798e79ad8648badf585c56e09c262273 8112672 tex optional texlive-luatex_2018.20180724-1_all.deb
6c7d9d3d5700edd8517e707d6b109766 30325704 doc optional texlive-metapost-doc_2018.20180724-1_all.deb
eed0f11173aac2d6c5cec7f2fff2e494 462856 tex optional texlive-metapost_2018.20180724-1_all.deb
a4dd3c0a589559453366faf48a7d72cb 31444 oldlibs optional texlive-omega_2018.20180724-1_all.deb
6e7552f1e9931bd9538a4b057b4f98af 119914568 doc optional texlive-pictures-doc_2018.20180724-1_all.deb
c67012538ae477338334285ffb5e4bff 4122608 tex optional texlive-pictures_2018.20180724-1_all.deb
795e17804a67761857b5eb8add37d363 31448 oldlibs optional texlive-plain-extra_2018.20180724-1_all.deb
8dbccc509e9228f028378c5d5c28147e 13168456 tex optional texlive-xetex_2018.20180724-1_all.deb
dd2966efc0b38a79d617cbfb20215118 31892 tex optional texlive_2018.20180724-1_all.deb
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEE68ws0vrA2voQX53I2A4JsIcUAGYFAltWtJkACgkQ2A4JsIcU
AGai0AgAjCR4QPZKSs2fH0dmEhCjDJaRWY+HoPdGfwDp/PEwXL50/PXyQx+PXXCO
pSFg3yvVGvzTe1Jqwo37ZyRJok5o41Kovhwec6H/eLrYdsdev23q89TR7p5Z67b+
Qh9A01PZZsxUZzSxaCjSzI2JtrnqF5R2kCrYkiR2ESHzi8BXwgSiiHdp3ObnqNQV
pS0a/jKWeuhmqO6gZTqxuL9Xt30eqix7eLby9R3iNWvO24RKQPvpcJVtrN6WDbvF
L8/gUFsFBcl49Mqoqwh72M1pAai57ua3Caez5CBoOzx3s/QpjLLHEFmrmyezLsKM
xEdF2dPtZ5sti7rhJTAZTcRokrmZRg==
=zyqC
-----END PGP SIGNATURE-----
--- End Message ---
Reply to: