Is Trisquel's version of the libkeyutils1 package not 1.5.9-8ubuntu1? If it is, isn't its build "reproducible" ( as in https://wiki.debian.org/ReproducibleBuilds )? If both answers are "yes", isn't it possible that Trisquel's infrastructure was compromised?

Reply via email to