From 1be510f9529cb082f802408b472a77d074b394c0 Mon Sep 17 00:00:00 2001 From: Nicolas Vigier Date: Sun, 14 Apr 2013 13:46:12 +0000 Subject: Add zarb MLs html archives --- zarb-ml/mageia-dev/2012-December/021030.html | 82 ++++++++++++++++++++++++++++ 1 file changed, 82 insertions(+) create mode 100644 zarb-ml/mageia-dev/2012-December/021030.html (limited to 'zarb-ml/mageia-dev/2012-December/021030.html') diff --git a/zarb-ml/mageia-dev/2012-December/021030.html b/zarb-ml/mageia-dev/2012-December/021030.html new file mode 100644 index 000000000..092cef339 --- /dev/null +++ b/zarb-ml/mageia-dev/2012-December/021030.html @@ -0,0 +1,82 @@ + + + + [Mageia-dev] Problem with missing signatures + + + + + + + + + +

[Mageia-dev] Problem with missing signatures

+ Kamil Rytarowski + n54 at gmx.com +
+ Sat Dec 29 19:49:54 CET 2012 +

+
+ +
Hello!
+
+Could we add a trigger to prevent unsigned packages from being uploaded?
+
+I've faced again bunch of unsigned packages.. and when I was trying to 
+rebuild plexus-i18n against missing signature, with bumping the release 
+- the build system said it's already built with that version [1].
+
+How is it possible? I have checked the history of this package.. and it 
+was never released as the version in the build system.
+
+Am I missing something? Was there an attack and a package injection?
+
+Kamil
+
+[1]
+http://svnweb.mageia.org/packages/cauldron/plexus-i18n/current/SPECS/plexus-i18n.spec?r1=268801&r2=335589
+
+
+
+ + + + + + + + + + +
+

+ +
+More information about the Mageia-dev +mailing list
+ -- cgit v1.2.1