[Bug 863306] Re: reload -- gpg sig invalid

Thu Nov 17 18:33:08 UTC 2011

May be related or the same bug - if not I will be happy to open a new
bug.

Twice I have had all the files in /var/lib/apt/lists replaced with the
splash/clickthrough page from an open wireless access point.

In one case it was in an airport, and the second was in a hotel. In both
cases I had previously associated with the SSID of the access point.

So - when I booted the laptop, but before I opened a browser and clocked
through the EULA for access, apt grabbed the splash screen and shoved it
into each of the files.

Here's an example of the content, from the latest hotel incident:

$cat us.archive.ubuntu.com_ubuntu_dists_oneiric-updates_universe_source_Sources.IndexDiff
<html><head>
<meta http-equiv="Pragma" content="no-cache">
<title>Object Moved
(.30)</title>
<link href="ibahn_theme.css" rel="Stylesheet" type="text/css" media="all">
<link href="menu.css" rel="stylesheet" type="text/css">
</head>
<body><center>
<A href="https://secure34.ibahn.com/purchase/purchase?MA=00-21-5c-95-62-d9&SC=BOSS9&DI=168617112&PN=1&BD=0875c796&PX=false" name=a1>Click Here To Continue</A>
</center></body>
</html>

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/863306

Title:
  reload --  gpg sig invalid

Status in “apt” package in Ubuntu:
  Confirmed
Status in “synaptic” package in Ubuntu:
  Confirmed

Bug description:
  W: GPG error: http://security.ubuntu.com oneiric-security Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster at ubuntu.com>
  W: GPG error: http://archive.canonical.com natty Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster at ubuntu.com>
  W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://extras.ubuntu.com oneiric Release: The following signatures were invalid: BADSIG 16126D3A3E5C1192 Ubuntu Extras Archive Automatic Signing Key <ftpmaster at ubuntu.com>

  W: GPG error: http://us.archive.ubuntu.com natty-backports Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster at ubuntu.com>
  W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://us.archive.ubuntu.com oneiric Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster at ubuntu.com>

  W: GPG error: http://us.archive.ubuntu.com oneiric-updates Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster at ubuntu.com>
  W: GPG error: http://us.archive.ubuntu.com oneiric-proposed Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster at ubuntu.com>
  W: GPG error: http://us.archive.ubuntu.com oneiric-backports Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster at ubuntu.com>
  W: Failed to fetch http://extras.ubuntu.com/ubuntu/dists/oneiric/Release  

  W: Failed to fetch http://ppa.launchpad.net/stebbins/handbrake-
  releases/ubuntu/dists/oneiric/main/binary-i386/Packages  404  Not
  Found

  W: Failed to fetch
  http://us.archive.ubuntu.com/ubuntu/dists/oneiric/Release

  W: Some index files failed to download. They have been ignored, or old
  ones used instead.

  using 11.04 invalid update mgr wont do partial upgrade, went to
  synaptic and depress reload and received the above error message

  ProblemType: Bug
  DistroRelease: Ubuntu 11.10
  Package: synaptic 0.75.2ubuntu6
  ProcVersionSignature: Ubuntu 3.0.0-11.18-generic 3.0.4
  Uname: Linux 3.0.0-11-generic i686
  ApportVersion: 1.23-0ubuntu1
  Architecture: i386
  Date: Fri Sep 30 08:29:51 2011
  ExecutablePath: /usr/sbin/synaptic
  InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Release i386 (20110427.1)
  ProcEnviron:
   SHELL=/bin/bash
   LANG=en_US.UTF-8
   PATH=(custom, no user)
  SourcePackage: synaptic
  UpgradeStatus: Upgraded to oneiric on 2011-09-30 (0 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/863306/+subscriptions