Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#71837 - [libwebp] verify signature
Attached to Project:
Arch Linux
Opened by T.J. Townsend (blakkheim) - Saturday, 14 August 2021, 23:14 GMT
Last edited by Jan Alexander Steffens (heftig) - Wednesday, 15 September 2021, 21:54 GMT
Opened by T.J. Townsend (blakkheim) - Saturday, 14 August 2021, 23:14 GMT
Last edited by Jan Alexander Steffens (heftig) - Wednesday, 15 September 2021, 21:54 GMT
|
DetailsDescription:
The libwebp PKGBUILD has a "validpgpkeys" line but it does not actually verify the authenticity of the source. The attached diff fixes this. |
This task depends upon
Closed by Jan Alexander Steffens (heftig)
Wednesday, 15 September 2021, 21:54 GMT
Reason for closing: Fixed
Additional comments about closing: libwebp 1.2.1-2
Wednesday, 15 September 2021, 21:54 GMT
Reason for closing: Fixed
Additional comments about closing: libwebp 1.2.1-2
Comment by T.J. Townsend (blakkheim) -
Wednesday, 15 September 2021, 21:29 GMT
Ping?
libwebp.diff