All ProjectsArch LinuxCommunity PackagesPacmanRelease Engineering Switch

Show Task #

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

Tasklist

FS#75813 - [ffmpeg] verify git tag signature

Task Type Feature Request Category Packages: Extra Status Closed Assigned To Maxime Gauduin (Alucryd) Architecture All Severity Low Priority Normal Reported Version Due in Version Undecided Due Date Undecided Percent Complete Votes 0 Private No

Details Starting with ffmpeg 5.1.1, all release tags are going to have a gpg signature. Since Arch does not build using the signed tarballs, it would be ideal and safer if the package script starts verifying the git tag signature from now on.