Offensive Security warned Kali Linux users to manually install a new Kali repository signing key to avoid experiencing update failures. This isn't the first time Kali Linux users have had to manually update their keyring to avoid having update issues. The announcement comes after OffSec lost the old repo signing key (ED444FF07D8D0BF6) and was forced to create a new one (ED65462EC8D5E4C5) signed by Kali Linux developers using signatures available on the Ubuntu OpenPGP key server. While OffSec didn't share the date when it realized the key was lost, the company added that the Kali Linux repo was frozen on February 18th. In February 2018, Kali devs also let the GPG key expire and asked users to update the new key manually. Those who don't trust manually updating the keyring can also reinstall Kali on their systems using images updated with the new keyring. Sucks for you, but at least you can manually update," the Kali team said at the time. "If you don't update Kali regularly (*cough*), then your archive-keyring package is outdated, and you'll get key mismatches when working with our repositories.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Mon, 28 Apr 2025 16:40:00 +0000