Keys replaced without authorization during update

Asked by Greg Deward on 2017-01-25

Who is Alexandru Rosianu Bintray and why is he showing up on my machine? And where are my keys!?!?!

After updating a Linux Mint box I could not use gpg --list-keys without getting a permission denied error. It was now owned by root. After changing the permissions of my ~/.gnupg back to me (using sudo chown -R gdeward.gdeward ~/.gnupg), the gpg --list-keys command works but my keys have been replaced with one key from this Alexandru guy! See for yourself:

gdeward@devwks01: ~/
$ gpg --list-keys
/home/gdeward/.gnupg/pubring.gpg
--------------------------------
pub 4096R/xxxxxxxx 2016-01-29 [expires: 2020-01-29]
uid Alexandru Rosianu Bintray &lt;<email address hidden>&gt;
sub 4096R/xxxxxxxx 2016-01-29 [expires: 2020-01-29]
(I masked the key IDs, that were actually shown, from the snippet above.)

Important:
I originally built this machine using dotfiles tweaked from Catalin Maris, available here on GitHub. That install caused me to create new keys on GitHub. They were listed here prior to me doing an apt-get upgrade.

Searching for a list of GPG packages shows:

gdeward@devwks01: ~
$ apt list --installed | grep gpg

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

gpgv/xenial-updates,xenial-security,now 1.4.20-1ubuntu3.1 amd64 [installed]
libgpg-error0/xenial,now 1.21-2ubuntu1 amd64 [installed]
libgpgme11/xenial,now 1.6.0-1 amd64 [installed]

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu gnupg Edit question
Assignee:
No assignee Edit question
Last query:
2017-01-25
Last reply:
2017-01-25
Manfred Hampl (m-hampl) said : #1

We are sorry, but this is support for Ubuntu only, and not for other operating systems even if they might be based on Ubuntu.

Please ask at the Linux Mint forum http://forums.linuxmint.com/ or use other channels as listed on https://www.linuxmint.com/links.php

We don't support Mint here.

Can you help with this problem?

Provide an answer of your own, or ask Greg Deward for more information if necessary.

To post a message you must log in.