MySQL Release Engineering PGP Key for Apt Repos Has Expired

#1

Post by scblzn » Wed, Oct 22, 2025, 7:18 PM UTC

Seems like MySQL Release Engineering has let their PGP signing key for APT Repos expire

Cannot find a new one published either

Am I the only one?

pub rsa4096 2023-10-23 [SC] [expired: 2025-10-22] BCA4 3417 C3B4 85DD 128E C6D4 B7B3 B788 A8D3 785C uid [ expired] MySQL Release Engineering

Re: MySQL Release Engineering PGP Key for Apt Repos Has Expired

#2

Post by Liquix » Wed, Oct 22, 2025, 9:02 PM UTC

did you manage to find the new key?

Re: MySQL Release Engineering PGP Key for Apt Repos Has Expired

#3

Post by scblzn » Wed, Oct 22, 2025, 10:04 PM UTC

Liquix wrote: post #2

did you manage to find the new key?

No, checked in PGP Directory right now and I still don't see anything issued in 2025

Re: MySQL Release Engineering PGP Key for Apt Repos Has Expired

#4

Post by BonoboIO » Thu, Oct 23, 2025, 4:33 AM UTC

Installing or updating MySQL is not a pleasant experience, every time …

Re: MySQL Release Engineering PGP Key for Apt Repos Has Expired

#5

Post by Liquix » Thu, Oct 23, 2025, 9:34 AM UTC

scblzn wrote: post #3

Liquix wrote: post #2

did you manage to find the new key?

No, checked in PGP Directory right now and I still don't see anything issued in 2025

yeah, me neither. for anyone else who comes across this, these may be helpful to monitor:

https://bugs.mysql.com/bug.php?id=119212

https://bugs.mysql.com/bug.php?id=119213

https://repo.mysql.com/

https://keyserver.ubuntu.com/pks/lookup?search=mysql-build%4...

Re: MySQL Release Engineering PGP Key for Apt Repos Has Expired

#6

Post by gethly » Thu, Oct 23, 2025, 1:11 PM UTC

A bit off topic but Why are you using MySQL and not MariaDB?

Re: MySQL Release Engineering PGP Key for Apt Repos Has Expired

#7

Post by dtaivpp » Thu, Oct 23, 2025, 5:35 PM UTC

Adding to the risk register: We rely on software that Oracle is the primary maintainer of.

Re: MySQL Release Engineering PGP Key for Apt Repos Has Expired

#8

Post by dtaivpp » Thu, Oct 23, 2025, 5:40 PM UTC

dtaivpp wrote: post #7

Adding to the risk register: We rely on software that Oracle is the primary maintainer of.

Edit the new key is up here: https://keyserver.ubuntu.com/pks/lookup?search=B7B3B788A8D37...