Post · bonfire.cafe

@daedalus@eigenmagic.net 1 hr. ago

Looks like HashiCorp had some sort of security incident, and have rotated their open source package signing keys: https://discuss.hashicorp.com/t/hcsec-2026-33-hashicorp-linux-signing-gpg-key-update-ca026560/77734

HashiCorp Discuss

HCSEC-2026-33 - HashiCorp Linux Signing GPG Key Update (CA026560)

Bulletin ID: HCSEC-2026-33 Publication Date: September 10, 2026 Last Updated: September 11, 2026 Summary Action is required for customers who install HashiCorp software via our Linux APT or RPM repositories. The HashiCorp GPG key used to sign Linux packages was rotated on September 10th, 2026. The new key fingerprint is D55C 0D1A C78A 8D81 26CB 631C FC9C A96A CA02 6560. The new key fingerprint is also available on our Trust Page (https://www.hashicorp.com/en/trust/security). Background Th...

1 Boost

0 Likes

No replies yet

Be the first to share your thoughts.

Log in