Just got advisory RHEA-1999:059-01 in the mail and proceeded to download the affected packages. Several of them were not, in fact, signed with RedHat's gpg key. Or, at least, doing an rpm -K on them produced only glib-1.2.6-2.i386.rpm: md5 OK The packages include: glib-1.2.6-2.i386.rpm: md5 OK glib-1.2.6-2.src.rpm: md5 OK glib-devel-1.2.6-2.i386.rpm: md5 OK gtk+-1.2.6-1.i386.rpm: md5 OK gtk+-1.2.6-1.src.rpm: md5 OK gtk+-devel-1.2.6-1.i386.rpm: md5 OK gtk-engines-0.9-1.i386.rpm: md5 OK gtk-engines-0.9-1.src.rpm: md5 OK gtop-1.0.5-1.i386.rpm: md5 OK gtop-1.0.5-1.src.rpm: md5 OK
*** This bug has been marked as a duplicate of 7638 ***