SRU: apt-transport-https segfaults when downloading from SBT repository

Bug #1435984 reported by Michał Zając on 2015-03-24
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
apt (Ubuntu)
Undecided
Unassigned
Trusty
Undecided
Unassigned

Bug Description

[Impact]

apt-transport-https crashes whenever any repository's Owner is NULL.

This leaves the user unable to get any upgrades as long as the problematic repository is present in sources.list or sources.list.d directory.

[Test Case]

1. echo "deb https://dl.bintray.com/sbt/debian /" | sudo tee -a /etc/apt/sources.list.d/sbt.list
2. sudo apt-get update
3. sudo apt-get install sbt

Expected result:
The package gets installed/updated.

Actual result:
E: Method https has died unexpectedly!
E: Sub-process https received a segmentation fault.

[Regression Potential]

The patch that was uploaded to both Debian and Ubuntu Vivid is rather simple, therefore the regression potential is really low.

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: apt 1.0.1ubuntu2.6
ProcVersionSignature: Ubuntu 3.13.0-46.79-generic 3.13.11-ckt15
Uname: Linux 3.13.0-46-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.7
Architecture: amd64
CurrentDesktop: KDE
Date: Tue Mar 24 18:15:25 2015
InstallationDate: Installed on 2014-08-04 (232 days ago)
InstallationMedia: Kubuntu 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.2)
SourcePackage: apt
UpgradeStatus: No upgrade log present (probably fresh install)

Michał Zając (quintasan) wrote :
Michael Vogt (mvo) on 2015-03-25
Changed in apt (Ubuntu):
status: New → Fix Released
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in apt (Ubuntu Trusty):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers