Please backport apt 1.0.1ubuntu2.2 (main) from trusty-proposed

Bug #1346973 reported by Jorge Niedbalski
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Precise Backports
Won't Fix
Undecided
Unassigned

Bug Description

Please backport apt 1.0.1ubuntu2.2 (main) from trusty-proposed to precise.

Reason for the backport:
========================

APT 0.8.16~exp12ubuntu10.10 in precise turned off InRelease support (successor to the split Release.gpg/Release file design on the mirrors) due to CVE-2013-1051 / USN-1762-1

Also a cherry-picking of changes has turned out to be much more intrusive than expected.
InRelease files are gpg clearsigned so all of the gpg validation logic needs to be re-imported as well, which makes a SRU a very difficult exercise.

Testing:
========
Mark off items in the checklist [X] as you test them, but please leave the checklist so that backporters can quickly evaluate the state of testing.

* precise:
[X] Package builds without modification
[X] libapt-inst1.5 installs cleanly and runs
[X] apt-doc installs cleanly and runs
[X] apt-transport-https installs cleanly and runs
[X] libapt-pkg-doc installs cleanly and runs
[X] apt installs cleanly and runs
[X] apt-utils installs cleanly and runs
[X] libapt-pkg-dev installs cleanly and runs
[X] libapt-pkg4.12 installs cleanly and runs

Reverse dependencies:
=====================
The following reverse-dependencies need to be tested against the new version of apt. For reverse-build-dependencies (-Indep), please test that the package still builds against the new apt. For reverse-dependencies, please test that the version of the package currently in the release still works with the new apt installed. Reverse- Recommends, Suggests, and Enhances don't need to be tested, and are listed for completeness-sake.

libapt-inst1.5
--------------

apt-doc
-------

apt-transport-https
-------------------
* ubuntu-standard
  [ ] precise (Reverse-Recommends)
* kubuntu-active
  [ ] precise (Reverse-Recommends)

libapt-pkg-doc
--------------

apt
---
* debconf
  [ ] precise (Reverse-Conflicts)
* dwww
  [ ] precise (Reverse-Recommends)
* daptup
  [ ] precise (Reverse-Depends)
* upgrade-system
  [ ] precise (Reverse-Depends)
* apport-retrace
  [ ] precise (Reverse-Depends)
* ara
  [ ] precise (Reverse-Recommends)
* ubuntu-extras-keyring
  [ ] precise (Reverse-Depends)
* squid-deb-proxy-client
  [ ] precise (Reverse-Depends)
* apt-build
  [ ] precise (Reverse-Depends)
* lsb-release
  [ ] precise (Reverse-Recommends)
* srcinst
  [ ] precise (Reverse-Depends)
* unattended-upgrades
  [ ] precise (Reverse-Depends)
* blends-dev
  [ ] precise (Reverse-Depends)
* apt-listchanges
  [ ] precise (Reverse-Depends)
* reprepro
  [ ] precise (Reverse-Recommends)
* add-apt-key
  [ ] precise (Reverse-Depends)
* libsbuild-perl
  [ ] precise (Reverse-Depends)
* debian-installer
  [ ] precise (Reverse-Build-Depends)
* python-reportbug
  [ ] precise (Reverse-Depends)
* cron-apt
  [ ] precise (Reverse-Depends)
* emdebian-archive-keyring
  [ ] precise (Reverse-Depends)
* xapt
  [ ] precise (Reverse-Depends)
* emdebian-grip
  [ ] precise (Reverse-Depends)
* apt-zip
  [ ] precise (Reverse-Depends)
* xara-gtk
  [ ] precise (Reverse-Recommends)
* apt-src
  [ ] precise (Reverse-Depends)
* debtags
  [ ] precise (Reverse-Depends)
  [ ] precise (Reverse-Build-Depends)
* debian-ports-archive-keyring
  [ ] precise (Reverse-Depends)
* ubuntu-minimal
  [ ] precise (Reverse-Depends)
* apt-show-source
  [ ] precise (Reverse-Depends)
* tasksel
  [ ] precise (Reverse-Depends)
* jablicator
  [ ] precise (Reverse-Depends)
* piuparts
  [ ] precise (Reverse-Depends)
* apt-show-versions
  [ ] precise (Reverse-Depends)
* debfoster
  [ ] precise (Reverse-Recommends)
* multistrap
  [ ] precise (Reverse-Depends)
* dctrl-tools
  [ ] precise (Reverse-Suggests)
* auto-apt
  [ ] precise (Reverse-Recommends)
* dpkg
  [ ] precise (Reverse-Suggests)
  [ ] precise (Reverse-Breaks)
* apt-offline
  [ ] precise (Reverse-Depends)
* ubiquity
  [ ] precise (Reverse-Build-Depends)
* xdeb
  [ ] precise (Reverse-Breaks)
* apt-move
  [ ] precise (Reverse-Recommends)
* debian-cd
  [ ] precise (Reverse-Depends)
* deborphan
  [ ] precise (Reverse-Recommends)
* apticron
  [ ] precise (Reverse-Depends)
* wajig
  [ ] precise (Reverse-Depends)
* dpkg-www
  [ ] precise (Reverse-Depends)
* reportbug
  [ ] precise (Reverse-Depends)
* debirf
  [ ] precise (Reverse-Depends)

apt-utils
---------
* debconf
  [ ] precise (Reverse-Recommends)
* aptoncd
  [ ] precise (Reverse-Depends)
* mini-dinstall
  [ ] precise (Reverse-Depends)
* xdeb
  [ ] precise (Reverse-Depends)
* simple-cdd
  [ ] precise (Reverse-Depends)
* oem-config-remaster
  [ ] precise (Reverse-Depends)
* ubuntu-minimal
  [ ] precise (Reverse-Depends)
* autopkgtest
  [ ] precise (Reverse-Recommends)
* sbuild
  [ ] precise (Reverse-Depends)
* debian-installer
  [ ] precise (Reverse-Build-Depends)
* libsbuild-perl
  [ ] precise (Reverse-Depends)
* linaro-image-tools
  [ ] precise (Reverse-Depends)
  [ ] precise (Reverse-Build-Depends)
* debarchiver
  [ ] precise (Reverse-Depends)
* apt-build
  [ ] precise (Reverse-Depends)
* livecd-rootfs
  [ ] precise (Reverse-Depends)
* python-apt
  [ ] precise (Reverse-Build-Depends)
* unattended-upgrades
  [ ] precise (Reverse-Depends)

libapt-pkg-dev
--------------
* qapt
  [ ] precise (Reverse-Build-Depends)
* apt-watch
  [ ] precise (Reverse-Build-Depends)
* debian-xcontrol
  [ ] precise (Reverse-Build-Depends)
* libqapt-dev
  [ ] precise (Reverse-Depends)
* apt-move
  [ ] precise (Reverse-Build-Depends)
* aptitude
  [ ] precise (Reverse-Build-Depends)
* libapt-pkg-perl
  [ ] precise (Reverse-Build-Depends)
* packagekit
  [ ] precise (Reverse-Build-Depends)
* libept-dev
  [ ] precise (Reverse-Depends)
* synaptic
  [ ] precise (Reverse-Build-Depends)
* openscap
  [ ] precise (Reverse-Build-Depends)
* apt-transport-debtorrent
  [ ] precise (Reverse-Build-Depends)
* postgresql-debversion
  [ ] precise (Reverse-Build-Depends)
* gnome-packagekit
  [ ] precise (Reverse-Build-Depends)
* aptsh
  [ ] precise (Reverse-Build-Depends)
* unity-lens-applications
  [ ] precise (Reverse-Build-Depends)
* adept
  [ ] precise (Reverse-Build-Depends)
* python-apt-dev
  [ ] precise (Reverse-Depends)
* oval-interpreter
  [ ] precise (Reverse-Build-Depends)
* libept
  [ ] precise (Reverse-Build-Depends)
* python-apt
  [ ] precise (Reverse-Build-Depends)
* ruby-debian
  [ ] precise (Reverse-Build-Depends)

libapt-pkg4.12
--------------
* libqapt-runtime
  [ ] precise (Reverse-Depends)
* debian-xcontrol
  [ ] precise (Reverse-Depends)
* postgresql-9.1-debversion
  [ ] precise (Reverse-Depends)
* apt-move
  [ ] precise (Reverse-Depends)
* aptitude
  [ ] precise (Reverse-Depends)
* libapt-pkg-perl
  [ ] precise (Reverse-Depends)
* python3-apt-dbg
  [ ] precise (Reverse-Depends)
* libept1.4.12
  [ ] precise (Reverse-Depends)
* libqapt1
  [ ] precise (Reverse-Depends)
* python-apt-dbg
  [ ] precise (Reverse-Depends)
* apt-transport-debtorrent
  [ ] precise (Reverse-Depends)
* apt-watch-backend
  [ ] precise (Reverse-Depends)
* aptsh
  [ ] precise (Reverse-Depends)
* libapt-inst1.4
  [ ] precise (Reverse-Depends)
* synaptic
  [ ] precise (Reverse-Depends)
* python3-apt
  [ ] precise (Reverse-Depends)
* libopenscap1
  [ ] precise (Reverse-Depends)
* adept
  [ ] precise (Reverse-Depends)
* qapt-deb-installer
  [ ] precise (Reverse-Depends)
* python-apt
  [ ] precise (Reverse-Depends)
* packagekit-backend-aptcc
  [ ] precise (Reverse-Depends)
* ruby-debian
  [ ] precise (Reverse-Depends)
* ovaldi
  [ ] precise (Reverse-Depends)

Revision history for this message
Jorge Niedbalski (niedbalski) wrote :

For your information, Attached is the ABI compatibility report, which states this backport as 'Incompatible' on a ABI level, maybe the tolerance level was a bit low.

This is comparing the precise version ( installed ) versus the trusty version ( to be backported )

Revision history for this message
Seyeong Kim (seyeongkim) wrote :

I built and installed trusty-updates source on precise.

had no problem.

also

built aptitude, synaptic ( precise ) with no errors.

used aptitude, synaptic with no errors so far ( install packages and remove list update )

Thanks

Dan Streetman (ddstreet)
Changed in precise-backports:
status: New → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.