security updates with a new dependency don't get installed
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
unattended-upgrades (Ubuntu) |
Fix Released
|
High
|
Brian Murray | ||
Xenial |
Fix Released
|
High
|
Brian Murray | ||
Yakkety |
Fix Released
|
High
|
Brian Murray |
Bug Description
Test Case
---------
1) Boot a xenial system w/o chromium browser and w/o libspeechd2 installed
2) Install the release version of chromium browser e.g. "sudo apt-get install chromium-
3) Run apt-get update if you didn't already
4) Run "sudo /usr/bin/
5) Observe the following output "Checking: chromium-browser ([<Origin component:
pkg 'libspeechd2' not in allowed origin
sanity check failed"
With the version of unattended-upgrades from -proposed libspeechd2 should be from an allowed origin and chromium-browser will get updated.
Regression Potential
-------
This change modifies the behavior of unattended-upgrades such that new packages will be installed on a user's system and they may not except such behavior (e.g. why was libspeechd2 insalled?). However, this seems better than not installing security updates and leaving people's systems vulnerable to attack.
Original Description
-------
E.g. chromium-browser has an update, but U-U does not update it. I saw in update-manager that the security update is available before running U-U. Afterwards I can install the update by update-manager.
ProblemType: BugDistroRelease: Ubuntu 16.04
Package: unattended-upgrades 0.90
ProcVersionSign
Uname: Linux 4.4.0-36-generic i686
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: i386
CurrentDesktop: XFCE
Date: Sat Sep 17 11:13:40 2016
InstallationDate: Installed on 2016-09-05 (11 days ago)
InstallationMedia: Mythbuntu 16.04.1 LTS "Xenial Xerus" - Release i386 (20160719)
PackageArchitec
UpgradeStatus: No upgrade log present (probably fresh install)
summary: |
- Does not install all security updates + security updates with a new dependency don't get installed |
Changed in unattended-upgrades (Ubuntu Xenial): | |
status: | New → Triaged |
importance: | Undecided → High |
Changed in unattended-upgrades (Ubuntu Yakkety): | |
status: | Triaged → In Progress |
assignee: | nobody → Brian Murray (brian-murray) |
Changed in unattended-upgrades (Ubuntu Xenial): | |
status: | Triaged → In Progress |
assignee: | nobody → Brian Murray (brian-murray) |
description: | updated |
Here's the output of unattended-upgrades run with --debug:
bdmurray@flash:~$ sudo /usr/bin/ unattended- upgrade --verbose --debug a=xenial- security' , 'o=Ubuntu, a=xenial- updates' ] 'universe' archive: 'xenial- updates' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>, <Origin component: 'universe' archive: 'xenial- security' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>]) browser- l10n ([<Origin component: 'universe' archive: 'xenial- updates' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>, <Origin component: 'universe' archive: 'xenial- updates' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>, <Origin component: 'universe' archive: 'xenial- security' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>, <Origin component: 'universe' archive: 'xenial- security' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>]) codecs- ffmpeg- extra ([<Origin component: 'universe' archive: 'xenial- updates' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>, <Origin component: 'universe' archive: 'xenial- security' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>]) 'xenial- updates' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>, <Origin component:'main' archive: 'xenial- security' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>]) core-2. 0-5' not in allowed origin core-5. 7 ([<Origin component:'main' archive: 'xenial- updates' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>, <Origin component:'main' archive: 'xenial- security' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>]) core-2. 0-5' not in allowed origin unattended- upgrades/ unattended- upgrades- dpkg.log' since '2016-09-21 16:12:17'
Initial blacklisted packages:
Initial whitelisted packages:
Starting unattended upgrades script
Allowed origins are: ['o=Ubuntu,
Checking: chromium-browser ([<Origin component:
pkg 'libspeechd2' not in allowed origin
sanity check failed
Checking: chromium-
pkg 'libspeechd2' not in allowed origin
sanity check failed
Checking: chromium-
pkg 'libspeechd2' not in allowed origin
sanity check failed
Checking: mysql-server-5.7 ([<Origin component:'main' archive:
pkg 'libevent-
sanity check failed
Checking: mysql-server-
pkg 'libevent-
sanity check failed
pkgs that look like they should be upgraded:
Fetched 0 B in 0s (0 B/s)
fetch.run() result: 0
blacklist: []
whitelist: []
Packages that will be upgraded:
InstCount=0 DelCount=0 BrokenCount=0
Extracting content from '/var/log/