group.of.nepali.translators team mailing list archive
-
group.of.nepali.translators team
-
Mailing list archive
-
Message #09002
[Bug 1624641] Re: security updates with a new dependency don't get installed
This bug was fixed in the package unattended-upgrades - 0.92ubuntu1.1
---------------
unattended-upgrades (0.92ubuntu1.1) yakkety; urgency=medium
* Modify data/50unattended-upgrades.Ubuntu such that the release pocket is
an allowed origin so that security updates with a new dependency will be
upgraded and the new dependency will be installed. (LP: #1624641)
* Create logfile_dpkg if it does not exist so that the file can be read
later, thereby preventing a FileNotFound crash. (LP: #1590321)
* Create the directory /var/lib/apt/periodic/, if it does not exist, so that
we don't receive a Traceback when trying to write a stampfile there.
(LP: #1639977)
-- Brian Murray <brian@xxxxxxxxxx> Mon, 07 Nov 2016 12:41:10 -0800
** Changed in: unattended-upgrades (Ubuntu Yakkety)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1624641
Title:
security updates with a new dependency don't get installed
Status in unattended-upgrades package in Ubuntu:
Fix Released
Status in unattended-upgrades source package in Xenial:
Fix Released
Status in unattended-upgrades source package in Yakkety:
Fix Released
Bug description:
Test Case
---------
1) Boot a xenial system w/o chromium browser and w/o libspeechd2 installed
2) Install the release version of chromium browser e.g. "sudo apt-get install chromium-browser=49.0.2623.108-0ubuntu1.1233 chromium-browser-l10n=49.0.2623.108-0ubuntu1.1233 chromium-codecs-ffmpeg-extra=49.0.2623.108-0ubuntu1.1233"
3) Run apt-get update if you didn't already
4) Run "sudo /usr/bin/unattended-upgrades -v -d"
5) Observe the following output "Checking: chromium-browser ([<Origin component:'universe' archive:'xenial-updates' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>, <Origin component:'universe' archive:'xenial-security' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>])
pkg 'libspeechd2' not in allowed origin
sanity check failed"
With the version of unattended-upgrades from -proposed libspeechd2
should be from an allowed origin and chromium-browser will get
updated.
Regression Potential
--------------------
This change modifies the behavior of unattended-upgrades such that new packages will be installed on a user's system and they may not except such behavior (e.g. why was libspeechd2 insalled?). However, this seems better than not installing security updates and leaving people's systems vulnerable to attack.
Original Description
--------------------
E.g. chromium-browser has an update, but U-U does not update it. I saw in update-manager that the security update is available before running U-U. Afterwards I can install the update by update-manager.
ProblemType: BugDistroRelease: Ubuntu 16.04
Package: unattended-upgrades 0.90
ProcVersionSignature: Ubuntu 4.4.0-36.55-generic 4.4.16
Uname: Linux 4.4.0-36-generic i686
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: i386
CurrentDesktop: XFCE
Date: Sat Sep 17 11:13:40 2016
InstallationDate: Installed on 2016-09-05 (11 days ago)
InstallationMedia: Mythbuntu 16.04.1 LTS "Xenial Xerus" - Release i386 (20160719)
PackageArchitecture: allSourcePackage: unattended-upgrades
UpgradeStatus: No upgrade log present (probably fresh install)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/1624641/+subscriptions