touch-packages team mailing list archive

[Launchpad Bug Tracker <1371058@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package apt - 0.7.25.3ubuntu9.17.1

---------------
apt (0.7.25.3ubuntu9.17.1) lucid-security; urgency=low

  * SECURITY UPDATE:
    - fix potential buffer overflow, thanks to the
      Google Security Team (CVE-2014-6273)
  * Fix regression from the previous upload when file:/// sources
    are used and those are on a different partition than
    the apt state directory (LP: #1371058)
  * Fix regression when Dir::state::lists is set to a relative path
  * Fix regression when cdrom: sources got rewriten by apt-cdrom add
 -- Michael Vogt <michael.vogt@xxxxxxxxxx>   Tue, 23 Sep 2014 08:58:49 +0200

** Changed in: apt (Ubuntu Lucid)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1371058

Title:
  Regression: Latest apt security update returns Hash Sum mismatch for
  file: URI:s

Status in “apt” package in Ubuntu:
  In Progress
Status in “apt” source package in Lucid:
  Fix Released
Status in “apt” source package in Precise:
  Fix Released
Status in “apt” source package in Trusty:
  Confirmed
Status in “apt” source package in Utopic:
  In Progress
Status in “apt” package in Debian:
  New

Bug description:
  When running 'apt-get update' on Ubuntu Lucid using 0.7.25.3ubuntu9.16
  I get Hash Sum mismatch when using file: URI:s.

  First time running apt-get update after cleaning /var/lib/dpkg/lists/
  and /var/lib/dpkg/lists/partial it works. However the second time I
  get:

  root@crepes:/etc/apt# apt-get update
  Ign file:/mirrors/ubuntu/ubuntu/ lucid-security/main Translation-en_DK
  Ign file:/mirrors/ubuntu/ubuntu/ lucid-security/restricted Translation-en_DK
  Ign file:/mirrors/ubuntu/ubuntu/ lucid-security/universe Translation-en_DK
  Ign file:/mirrors/ubuntu/ubuntu/ lucid-security/multiverse Translation-en_DK
  Get:1 file: lucid-security Release.gpg [198B]          
  Get:2 file: lucid-security Release [57,3kB]                                       
  Hit http://security.ubuntu.com lucid-security Release.gpg                       
  Ign http://security.ubuntu.com/ubuntu/ lucid-security/main Translation-en_DK
  Ign http://security.ubuntu.com/ubuntu/ lucid-security/restricted Translation-en_DK
  Ign http://security.ubuntu.com/ubuntu/ lucid-security/universe Translation-en_DK
  Ign http://security.ubuntu.com/ubuntu/ lucid-security/multiverse Translation-en_DK
  Hit http://security.ubuntu.com lucid-security Release
  Hit http://security.ubuntu.com lucid-security/main Packages
  Hit http://security.ubuntu.com lucid-security/restricted Packages
  Hit http://security.ubuntu.com lucid-security/universe Packages
  Hit http://security.ubuntu.com lucid-security/multiverse Packages
  W: Failed to fetch file:/mirrors/ubuntu/ubuntu/dists/lucid-security/main/binary-amd64/Packages.bz2  Hash Sum mismatch

  W: Failed to fetch file:/mirrors/ubuntu/ubuntu/dists/lucid-
  security/restricted/binary-amd64/Packages.bz2  Hash Sum mismatch

  W: Failed to fetch file:/mirrors/ubuntu/ubuntu/dists/lucid-
  security/universe/binary-amd64/Packages.bz2  Hash Sum mismatch

  W: Failed to fetch file:/mirrors/ubuntu/ubuntu/dists/lucid-
  security/multiverse/binary-amd64/Packages.bz2  Hash Sum mismatch

  E: Some index files failed to download, they have been ignored, or old
  ones used instead.

  
  Runnng apt-get -o Acquire::CompressionTypes::Order="gz" changing to bz2 every second it works. 

  Reverting back to 0.7.25.3ubuntu9.15 it works.

  And, of course, it works if only using http: URI:s.

  Looks like a regression in 0.7.25.3ubuntu9.16

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1371058/+subscriptions