Bug#316121: apt: Ubuntu key installed in /etc/apt/trusted.gpg

[Kurt Roeckx <kurt@roeckx.be>]

Package: apt
Version: 0.6.38
Severity: serious

Hi,

I currently have the ubuntu key installed in
/etc/apt/trusted.gpg, and do not have the debian key in it.
This is not at all what I expect.  I never had anything from
ubuntu installed.

I assume this happened with an earlier version apt (0.6.36) from
experimental which was needed to build something else from
experimental (aptitude?).  The file is from May 14, so this must
have happened before the current version in unstable.  This was
then back downgraded to 0.5.28.6, and now just upgraded to
0.6.38.

I think you should always import the debian key into trusted.gpg
file, optional with debconf questions.


Kurt