Following is a short summary of what bug #1657440 describes.
There's an hourly window when the UCA is being updated. An apt update call during this window causes the Release file to be downloaded and Release.gpg file to not be downloaded. The missing Release.gpg file causes the "unauthenticated" packages.
According to bug #1657440 this issue has been partially fixed back to xenial. The missing Release.gpg file issue still exists, however, prior to the fix to apt in bug #1657440, the missing Release.gpg issue would not correct until an hour had passed and another apt update was run. At this point, an ensuing apt update call apparently resolves the issue.
So bottom line, there is still an issue but it is at least resolvable with an ensuing apt update.
Hello Rafael,
Thank you for reporting this bug.
Following is a short summary of what bug #1657440 describes.
There's an hourly window when the UCA is being updated. An apt update call during this window causes the Release file to be downloaded and Release.gpg file to not be downloaded. The missing Release.gpg file causes the "unauthenticated" packages.
According to bug #1657440 this issue has been partially fixed back to xenial. The missing Release.gpg file issue still exists, however, prior to the fix to apt in bug #1657440, the missing Release.gpg issue would not correct until an hour had passed and another apt update was run. At this point, an ensuing apt update call apparently resolves the issue.
So bottom line, there is still an issue but it is at least resolvable with an ensuing apt update.
There are scripts to recreate in bug #1657440.
And here is the patch to apt for reference: https:/ /github. com/Debian/ apt/commit/ 2a6d2e9c0781a0a 7bb5d2aad7b8bdb ee315d4461