[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Important infrastructure announcement



Richard Hughes wrote:
> PackageKit will only allow automatic updates of signed packages. If
> we're pumping out invalid signed updates then, well, meh.
 
The implication of the announcement is that signed updates may be
compromised (or possibly even the key).  How else can we read this?

	"as a precaution, we recommend you not download or update
	any additional packages on your Fedora systems"

Danny.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]