Ubuntu
mandos package

package mandos-client 1.6.0-1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 2

Bug #1400145 reported by LG on 2014-12-07

This bug affects 2 people

Affects		Status	Importance	Assigned to	Milestone
	mandos (Ubuntu)	Fix Released	Undecided	Unassigned

Bug Description

ProblemType: Package
DistroRelease: Ubuntu 14.04
Package: mandos-client 1.6.0-1
ProcVersionSignature: Ubuntu 3.13.0-41.70-generic 3.13.11.11
Uname: Linux 3.13.0-41-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.6
Architecture: amd64
Date: Sun Dec 7 20:56:33 2014
DuplicateSignature: package:mandos-client:1.6.0-1:subprocess installed post-installation script returned error exit status 2
ErrorMessage: subprocess installed post-installation script returned error exit status 2
InstallationDate: Installed on 2014-05-25 (196 days ago)
InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Release amd64 (20140417)
SourcePackage: mandos
Title: package mandos-client 1.6.0-1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 2
UpgradeStatus: No upgrade log present (probably fresh install)

Tags:

Revision history for this message

LG (lgindia) wrote on 2014-12-07:

AptOrdering.txt Edit (272 bytes, text/plain; charset="utf-8")
Dependencies.txt Edit (3.6 KiB, text/plain; charset="utf-8")
Df.txt Edit (637 bytes, text/plain; charset="utf-8")
Dmesg.txt Edit (66.8 KiB, text/plain; charset="utf-8")
DpkgHistoryLog.txt Edit (2.5 KiB, text/plain; charset="utf-8")
DpkgTerminalLog.txt Edit (2.2 KiB, text/plain; charset="utf-8")

Revision history for this message

Seth Arnold (seth-arnold) wrote on 2014-12-08: Bug is not a security issue

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.

information type:

Private Security → Public

Apport retracing service (apport) on 2014-12-08

tags:

removed: need-duplicate-check

Revision history for this message

Mandos Maintainers (mandos-maintainers) wrote on 2014-12-08:

This is not a bug in Mandos, it is actually, ultimately, GnuPG issue 1622: <http://bugs.g10code.com/gnupg/issue1622> (also in Debian as Debian bug #737128: <https://bugs.debian.org/737128>). Mandos 1.6.5 includes a workaround, (see lines 234 to 239 in mandos-keygen). The upstream version of GnuPG 1.4.17 has fixed the issue, but the latest release of the 2.0 branch of GnuPG (2.0.26) does not contain a fix; the fix has, however, been committed to the 2.0 branch, so one would expect that the next release of GnuPG 2 (presumably 2.0.27) will contain the fix.

Revision history for this message

Mandos Maintainers (mandos-maintainers) wrote on 2014-12-08:

Patch backported from 1.6.5; a workaround for GnuPG issue 1622 Edit (527 bytes, text/plain)

For those unable to either upgrade Mandos to 1.6.5 or upgrade GnuPG to 1.4.17, here is a patch for Mandos to work around the bug in GnuPG 1.4.16.

Revision history for this message

Mandos Maintainers (mandos-maintainers) wrote on 2014-12-09:

A workaround for this bug in GnuPG 1.4.16 was included with Mandos 1.6.5, released on 2014-05-12, and a version including the workaround, 1.6.8, was included in Utopic.