← Back to team overview

touch-packages team mailing list archive

[Bug 1435984] [NEW] SRU: apt-transport-https segfaults when downloading from SBT repository

 

Public bug reported:

[Impact]

apt-transport-https crashes whenever any repository's Owner is NULL.

This leaves the user unable to get any upgrades as long as the
problematic repository is present in sources.list or sources.list.d
directory.


[Test Case]

1. echo "deb https://dl.bintray.com/sbt/debian /" | sudo tee -a /etc/apt/sources.list.d/sbt.list
2. sudo apt-get update
3. sudo apt-get install sbt

Expected result:
The package gets installed/updated.

Actual result:
E: Method https has died unexpectedly!
E: Sub-process https received a segmentation fault.

[Regression Potential]

The patch that was uploaded to both Debian and Ubuntu Vivid is rather
simple, therefore the regression potential is really low.

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: apt 1.0.1ubuntu2.6
ProcVersionSignature: Ubuntu 3.13.0-46.79-generic 3.13.11-ckt15
Uname: Linux 3.13.0-46-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.7
Architecture: amd64
CurrentDesktop: KDE
Date: Tue Mar 24 18:15:25 2015
InstallationDate: Installed on 2014-08-04 (232 days ago)
InstallationMedia: Kubuntu 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.2)
SourcePackage: apt
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: apt (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug trusty

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1435984

Title:
  SRU: apt-transport-https segfaults when downloading from SBT
  repository

Status in apt package in Ubuntu:
  New

Bug description:
  [Impact]

  apt-transport-https crashes whenever any repository's Owner is NULL.

  This leaves the user unable to get any upgrades as long as the
  problematic repository is present in sources.list or sources.list.d
  directory.

  
  [Test Case]

  1. echo "deb https://dl.bintray.com/sbt/debian /" | sudo tee -a /etc/apt/sources.list.d/sbt.list
  2. sudo apt-get update
  3. sudo apt-get install sbt

  Expected result:
  The package gets installed/updated.

  Actual result:
  E: Method https has died unexpectedly!
  E: Sub-process https received a segmentation fault.

  [Regression Potential]

  The patch that was uploaded to both Debian and Ubuntu Vivid is rather
  simple, therefore the regression potential is really low.

  ProblemType: Bug
  DistroRelease: Ubuntu 14.04
  Package: apt 1.0.1ubuntu2.6
  ProcVersionSignature: Ubuntu 3.13.0-46.79-generic 3.13.11-ckt15
  Uname: Linux 3.13.0-46-generic x86_64
  ApportVersion: 2.14.1-0ubuntu3.7
  Architecture: amd64
  CurrentDesktop: KDE
  Date: Tue Mar 24 18:15:25 2015
  InstallationDate: Installed on 2014-08-04 (232 days ago)
  InstallationMedia: Kubuntu 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.2)
  SourcePackage: apt
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1435984/+subscriptions


Follow ups

References