Re: libpng12 suspicious pgp key of a dead developer

[Claudia Pellegrino]

Hi Francesco,





Regards
Claudia

[1]: https://github.com/pnggroup/libpng/commits/libpng12/


On 18.10.26 11:34 AM, Francesco Yoshi Gobbo wrote:

The libpng12 branch (i.e., the stream of 1.2.x releases) is no longer maintained upstream. Its last commit was from September 28, 2017 (9 years ago), and the v1.2.59 tag was signed by Rander-Pehrson themselves. [1]

Hi, I was checking the key that needed importing for `libpng12`, and found out in Hacker News that Glenn Rander-Pehrson, the developer, died in 2018.. I find this suspicious enough to bring it to your attention.

Link hacker news: https://news.ycombinator.com/item?id=18297844

Link to the related page: https://sourceforge.net/p/png-mng/mailman/ message/36447670

OpenPGP_0xD11E9FC4F7C9DA3C.asc
Description: OpenPGP public key

OpenPGP_signature.asc
Description: OpenPGP digital signature