distribution
distribution copied to clipboard
clearlinux
Flatpak Flathub Signature Verification Bug in Clear Linux (42600-42740)
Clear Linux Flatpak Flathub Signature Verification Bug (42600-42740)
Summary:
In Clear Linux versions 42600 and 42740, the verification of Flathub signatures fails. This issue is not present in versions 42500 and 42100.
Bug Description:
When using Flatpak in the affected versions, the verification of the Flathub signature fails with the following error message:
error: Signature made Thu 01 Jan 1970 01:00:00 CET using [unknown name] key ID 562702E9E3ED7EE8
BAD signature from "Flathub Repo Signing Key <[email protected]>"
Steps to Reproduce:
- Install Clear Linux version 42740.
- Run
flatpak remote-delete flathubto remove any existing remote entries. - Add the Flathub repository using
flatpak remote-add --user flathub flathub.flatpakrepo. - Observe the error message during the signature verification process.
Expected Behavior:
The Flathub signature verification should complete successfully without any errors.
Actual Behavior:
The verification fails, and the following error is displayed:
BAD signature from "Flathub Repo Signing Key <[email protected]>"
Affected Versions:
| Version | Status |
|---|---|
| 42740 | Affected |
| 42600 | Affected |
Unaffected Versions:
| Version | Status |
|---|---|
| 42500 | Not Affected |
| 42100 | Not Affected |
Tested System Configurations:
- Clear Linux desktop installations (42740, 42600, 42500).
- Live USB installation images (42740, 42100).
Additional Notes:
- The issue appears to have been introduced between versions 42500 and 42600.
- The bug persists after downgrading from 42740 to 42600 but is resolved when downgrading further to 42500.
- The error might be related to changes in Flatpak or the GPG keys used by Flathub.
Same behaviour can be observed when trying to add the beta branch
flatpak remote-add flathub-beta https://flathub.org/beta-repo/flathub-beta.flatpakrepo
