update manager installed an update without my permission

[Thanasis Naskos]

Binary package hint: update-manager

Binary package hint: update-manager

1) lsb_release -rd
Description: Ubuntu 10.10
Release: 10.10

2) apt-cache policy update-manager
update-manager:
  Installed: 1:0.142.20
  Candidate: 1:0.142.20
  Version table:
 *** 1:0.142.20 0
        500 http://gr.archive.ubuntu.com/ubuntu/ maverick-updates/main i386 Packages
        100 /var/lib/dpkg/status
     1:0.142.19 0
        500 http://gr.archive.ubuntu.com/ubuntu/ maverick/main i386 Packages

3)A day before(01/26/2011), update manager informs me about new updates.
I've unchecked the updates mentioned above and click to "Install Updates"
Unchecked updates:
  Ubuntu One synchronization daemon library
  Ubuntu One client Python libraries
  Ubuntu One client
  Ubuntu One client GNOME integration

!!! I left ttf-umefont checked for installation !!!

In the download process I've noticed that I didn't uncheck the ttf-umefont so I've clicked to "Cancel", then uncheck ttf-umefont and click again to "Install Update".
But despite the fact I choose not to install ttf-umefont, update manager again tried to download this update. So I've canceled the procedure again in the download process.

Today (01/27/2011) Update Manager informs me again for the available updates. I've unchecked the same updates as yesterday including ttf-umefont and proceed to installation.
ttf-umefont was downloaded and installed without my permission!

4) What you expected to happen
do not install ttf-umefont if I choose to not to install it.

5) What happened instead
update-manager installs ttf-umefont without permission.

This bug is similar to #390653 but I'm using different version of ubuntu and update-manager and maybe the conditions under which the bug occurred were different!

ProblemType: Bug
DistroRelease: Ubuntu 10.10
Package: update-manager 1:0.142.20
ProcVersionSignature: Ubuntu 2.6.35-24.42-generic-pae 2.6.35.8
Uname: Linux 2.6.35-24-generic-pae i686
NonfreeKernelModules: nvidia
Architecture: i386
Date: Thu Jan 27 12:45:02 2011
InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Release i386 (20101007)
PackageArchitecture: all
ProcEnviron:
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: update-manager

[Manfred Hampl (m-hampl)]

Do you remember the exact moment when you clicked "cancel" during the first download?

Was update-manager at that moment already downloading ttf-umefont, or did you cancel the download before the download of ttf-umefont begun?

[Thanasis Naskos (naskoos)]

The first time, I think it was while ttf-unefont downloading (but I'm not sure),
I clearly remember that, the first time, I've noticed, during downloading, that the total size of downloads was 75mB and I've checked which was the biggest package and it was ttf-umefont with 45mB size. So I've canceled the procedure and uncheck it.

The second time was surely before ttf-umefont downloading...

[Manfred Hampl (m-hampl)]

I can confirm such behavior.

Just tried several combinations of partially and fully downloaded packages and I was able to see this effect on my machine (10.10 i386) in the following combination (although not sure if that is really the required situation to have it):

When starting update-manager it tells me that several updates are waiting to be downloaded and installed.

I fully downloaded package A without installing it
I started downloading for installation the package B and interrupted the download

This creates A.deb in /var/cache/apt/archives and 'half' of B.deb in /var/cache/apt/archives/partial

In update-manager selecting package A for installation leads to completing the download of B and installing both packages.

see screen shot in attachment (A=wine1.2, B=ttf-droid)

upgraded update-manager to 1:0.142.22 and see identical behavior.

[Manfred Hampl (m-hampl)]

Two independent reports with screen-shots should be enough to put the status to 'confirmed'