Johnny Hughes wrote: > On 04/21/2011 08:34 AM, Mathieu Baudier wrote: >>> Not updating is entirely sensible and sounds like the best default >>> position. >>> Installing a package you'd expect to be signed when it isn't signed >>> should ring alarm bells. >> >> I agree that my first answer was probably wrong, even with all >> disclaimers and warnings. <snip> > Maybe this would work out: > > yum --nogpgcheck update libuser-devel > > then you can update everything else later with gpg on. > I *like* that answer. And command line only, so the next time you go to yum update, it'll get the fixed package. > Although, like I said, this particular issue has now been corrected. And *very* quickly. mark