group.of.nepali.translators team mailing list archive

[Launchpad Bug Tracker <1812696@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package apt - 1.2.31

---------------
apt (1.2.31) xenial; urgency=medium

  * Fix name of APT::Update::Post-Invoke-Stats (was ...Update-Post...)
  * apt.dirs: Install auth.conf.d directory (LP: #1818996)
  * Merge translations from 1.6.10 (via 1.4.y branch)

apt (1.2.30) xenial; urgency=medium

  * merge security upload for content injection in http method (CVE-2019-3462);
    with fixed autopkgtest (LP: #1815750)
  * Introduce experimental 'never' pinning for sources (LP: #1814727)
  * Add support for /etc/apt/auth.conf.d/*.conf (netrcparts) (LP: #1811120)
  * Add a Packages-Require-Authorization Release file field (LP: #1814727)
  * NeverAutoRemove kernel meta packages (LP: #1787460)
  * doc: Set ubuntu-codename to xenial (LP: #1812696)
  * update: Provide APT::Update-Post-Invoke-Stats script hook point
    (LP: #1815760)
  * Introduce APT::Install::Pre-Invoke / Post-Invoke-Success (LP: #1815761)

 -- Julian Andres Klode <juliank@xxxxxxxxxx>  Tue, 12 Mar 2019 14:59:01
+0100

** Changed in: apt (Ubuntu Xenial)
       Status: Fix Committed => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-3462

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1812696

Title:
  APT doc and manpage uses wrong ubuntu-codename

Status in apt package in Ubuntu:
  Fix Released
Status in apt source package in Xenial:
  Fix Released
Status in apt source package in Bionic:
  Fix Released
Status in apt source package in Cosmic:
  Fix Released
Status in apt source package in Disco:
  Fix Released

Bug description:
  [Impact]

  APT documentation/example/manpages isn't referencing the current release
  which could be misleading for certain users.

  ---
  APT src code:
  ---
  [GOOD ubuntu-codename]

  * trusty:
  apt-1.0.1ubuntu2.18/doc/apt-verbatim.ent:<!ENTITY ubuntu-codename "trusty">

  [WRONG ubuntu-codename]

  * xenial:
  apt-1.2.29/doc/apt-verbatim.ent:<!ENTITY ubuntu-codename "trusty">

  * bionic:
  apt-1.6.7/doc/apt-verbatim.ent:<!ENTITY ubuntu-codename "xenial">

  * disco:
  apt-1.8.0~alpha3/doc/apt-verbatim.ent:<!ENTITY ubuntu-codename "xenial">
  ---

  * vendor/ubuntu/sources.list.in
  ---
  # See sources.list(5) manpage for more information
  # Remember that CD-ROMs, DVDs and such are managed through the apt-cdrom tool.
  deb http://us.archive.ubuntu.com/ubuntu &ubuntu-codename; main restricted
  deb-src http://us.archive.ubuntu.com/ubuntu &ubuntu-codename; main restricted

  deb http://security.ubuntu.com/ubuntu &ubuntu-codename;-security main restricted
  deb-src http://security.ubuntu.com/ubuntu &ubuntu-codename;-security main restricted

  deb http://us.archive.ubuntu.com/ubuntu &ubuntu-codename;-updates main restricted
  deb-src http://us.archive.ubuntu.com/ubuntu &ubuntu-codename;-updates main restricted
  ---

  The ubuntu-codename variable for Xenial and late in APT points to
  'trusty or 'xenial' which generate the doc example & manpage with the
  wrong release instead of the actual ubuntu-codename.

  APT in Xenial point to 'trusty'.
  APT in Bionic and late to 'xenial'

  It also affect the man page:

  Example took from Bionic:
  http://manpages.ubuntu.com/manpages/bionic/man5/sources.list.5.html
  http://manpages.ubuntu.com/manpages/bionic/man5/apt_preferences.5.html

  [Test Case]

  With Xenial and late:

   * Look sources.list(5) manpage
  Ex:
  http://manpages.ubuntu.com/manpages/bionic/man5/sources.list.5.html

   * Look apt_preferences(5) manpage
  Ex: http://manpages.ubuntu.com/manpages/bionic/man5/apt_preferences.5.html

   * Look /usr/share/doc/apt/examples/sources.list

  $ lsb_release -cs
  bionic

  $ cat /usr/share/doc/apt/examples/sources.list
  ----------------
  # See sources.list(5) manpage for more information
  # Remember that CD-ROMs, DVDs and such are managed through the apt-cdrom tool.
  deb http://us.archive.ubuntu.com/ubuntu xenial main restricted
  deb-src http://us.archive.ubuntu.com/ubuntu xenial main restricted

  deb http://security.ubuntu.com/ubuntu xenial-security main restricted
  deb-src http://security.ubuntu.com/ubuntu xenial-security main restricted

  deb http://us.archive.ubuntu.com/ubuntu xenial-updates main restricted
  deb-src http://us.archive.ubuntu.com/ubuntu xenial-updates main restricted
  ----------------------

  You'll notice they all point to the wrong release.

  While we understand it's not a "bug' and only a reference/example...
  I think it's for the best interest of all if the examples/manpage reference the current release.

  [Regression Potential]

   * None, it only affect documentation/examples and manpages. No
  behavior change in the APT code.

  [Other Info]

  [Original Description]
  From APT src code :

  ---
  [GOOD ubuntu-codename]
  * trusty:
  apt-1.0.1ubuntu2.18/doc/apt-verbatim.ent:<!ENTITY ubuntu-codename "trusty">

  [WRONG ubuntu-codename]
  * xenial:
  apt-1.2.29/doc/apt-verbatim.ent:<!ENTITY ubuntu-codename "trusty">

  * bionic:
  apt-1.6.7/doc/apt-verbatim.ent:<!ENTITY ubuntu-codename "xenial">

  * disco:
  apt-1.8.0~alpha3/doc/apt-verbatim.ent:<!ENTITY ubuntu-codename "xenial">
  ---

  * vendor/ubuntu/sources.list.in
  ---
  # See sources.list(5) manpage for more information
  # Remember that CD-ROMs, DVDs and such are managed through the apt-cdrom tool.
  deb http://us.archive.ubuntu.com/ubuntu &ubuntu-codename; main restricted
  deb-src http://us.archive.ubuntu.com/ubuntu &ubuntu-codename; main restricted

  deb http://security.ubuntu.com/ubuntu &ubuntu-codename;-security main restricted
  deb-src http://security.ubuntu.com/ubuntu &ubuntu-codename;-security main restricted

  deb http://us.archive.ubuntu.com/ubuntu &ubuntu-codename;-updates main restricted
  deb-src http://us.archive.ubuntu.com/ubuntu &ubuntu-codename;-updates main restricted
  ---

  The ubuntu-codename variable for Bionic and late in APT points to
  Xenial which generate the doc example with Xenial instead of the
  actual codename.

  * ./doc/sources.list.5.xml
  ---
  <!ENTITY % aptverbatiment SYSTEM "apt-verbatim.ent"> %aptverbatiment;
  ---

  It also seems to affect the man page by mentionning 'xenial'.
  Example took from Bionic:
  http://manpages.ubuntu.com/manpages/bionic/man5/sources.list.5.html
  http://manpages.ubuntu.com/manpages/bionic/man5/apt_preferences.5.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1812696/+subscriptions