Re: pkg/54048

[Jonathan Perkin <jperkin%joyent.com@localhost>]

The pkgsrc-security key has been updated, which will no longer cause
failures, but you will still see warnings due to the key being signed
by newer GnuPG keys (as far as we're aware).

For now I'm using this quick hack in my SmartOS/illumos and macOS
package sets to just ignore the warning:

  https://github.com/joyent/pkgsrc/commit/1a171bc4c27a22eceb284af2e221fbef66282a4c

and "pkg_admin check-pkg-vulnerabilities -s" works again.

The NetBSD netpgp has been correctly patched to handle the subpacket,
and I'm hoping netpgpverify will also have a proper fix in due course.

-- 
Jonathan Perkin  -  Joyent, Inc.  -  www.joyent.com