SRU: apt-transport-https segfaults when downloading from SBT repository

Bug #1435984 reported by Michał Zając
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
apt (Ubuntu)
Fix Released
Undecided
Unassigned
Trusty
Confirmed
Undecided
Unassigned

Bug Description

[Impact]

apt-transport-https crashes whenever any repository's Owner is NULL.

This leaves the user unable to get any upgrades as long as the problematic repository is present in sources.list or sources.list.d directory.

[Test Case]

1. echo "deb https://dl.bintray.com/sbt/debian /" | sudo tee -a /etc/apt/sources.list.d/sbt.list
2. sudo apt-get update
3. sudo apt-get install sbt

Expected result:
The package gets installed/updated.

Actual result:
E: Method https has died unexpectedly!
E: Sub-process https received a segmentation fault.

[Regression Potential]

The patch that was uploaded to both Debian and Ubuntu Vivid is rather simple, therefore the regression potential is really low.

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: apt 1.0.1ubuntu2.6
ProcVersionSignature: Ubuntu 3.13.0-46.79-generic 3.13.11-ckt15
Uname: Linux 3.13.0-46-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.7
Architecture: amd64
CurrentDesktop: KDE
Date: Tue Mar 24 18:15:25 2015
InstallationDate: Installed on 2014-08-04 (232 days ago)
InstallationMedia: Kubuntu 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.2)
SourcePackage: apt
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Michał Zając (quintasan) wrote :
Michael Vogt (mvo)
Changed in apt (Ubuntu):
status: New → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in apt (Ubuntu Trusty):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.