2023-02-08 11:09:11 |
Adrien Nader |
bug |
|
|
added bug |
2023-02-08 14:15:24 |
Kai Kasurinen |
bug |
|
|
added subscriber Kai Kasurinen |
2023-02-08 14:15:37 |
Launchpad Janitor |
anacron (Ubuntu): status |
New |
Confirmed |
|
2023-02-08 21:34:16 |
Adrien Nader |
attachment added |
|
anacron_2.3-36ubuntu1-to-2.3-36ubuntu2~ppa2.diff https://bugs.launchpad.net/ubuntu/+source/anacron/+bug/2006589/+attachment/5645637/+files/anacron_2.3-36ubuntu1-to-2.3-36ubuntu2~ppa2.diff |
|
2023-02-09 00:25:59 |
Ubuntu Foundations Team Bug Bot |
tags |
|
patch |
|
2023-02-09 00:26:06 |
Ubuntu Foundations Team Bug Bot |
bug |
|
|
added subscriber Ubuntu Sponsors Team |
2023-02-10 03:21:40 |
Michael Hudson-Doyle |
bug |
|
|
added subscriber Michael Hudson-Doyle |
2023-02-14 11:52:07 |
Adrien Nader |
attachment added |
|
anacron_2.3-36ubuntu1-to-2.3-36ubuntu2~ppa4.diff https://bugs.launchpad.net/ubuntu/+source/anacron/+bug/2006589/+attachment/5647064/+files/anacron_2.3-36ubuntu1-to-2.3-36ubuntu2~ppa4.diff |
|
2023-02-23 10:32:26 |
Adrien Nader |
attachment added |
|
anacron_2.3-36ubuntu1.dsc-to-anacron_2.3-36ubuntu2~ppa5.dsc.diff https://bugs.launchpad.net/ubuntu/+source/anacron/+bug/2006589/+attachment/5649527/+files/anacron_2.3-36ubuntu1.dsc-to-anacron_2.3-36ubuntu2~ppa5.dsc.diff |
|
2023-02-23 10:33:57 |
Adrien Nader |
attachment added |
|
anacron_2.3-36ubuntu2~ppa4.dsc-to-anacron_2.3-36ubuntu2~ppa5.dsc.diff https://bugs.launchpad.net/ubuntu/+source/anacron/+bug/2006589/+attachment/5649528/+files/anacron_2.3-36ubuntu2~ppa4.dsc-to-anacron_2.3-36ubuntu2~ppa5.dsc.diff |
|
2023-03-07 15:31:44 |
Adrien Nader |
attachment added |
|
anacron_2.3-36ubuntu1-to-2.3-36ubuntu2~ppa6.diff https://bugs.launchpad.net/ubuntu/+source/anacron/+bug/2006589/+attachment/5652480/+files/anacron_2.3-36ubuntu1-to-2.3-36ubuntu2~ppa6.diff |
|
2023-03-10 09:06:05 |
Launchpad Janitor |
anacron (Ubuntu): status |
Confirmed |
Fix Released |
|
2023-03-21 17:14:42 |
Adrien Nader |
tags |
patch |
block-proposed-kinetic patch |
|
2023-03-21 21:49:57 |
Adrien Nader |
attachment added |
|
anacron_2.3-33ubuntu1.dsc-to-anacron_2.3-33ubuntu2.dsc https://bugs.launchpad.net/ubuntu/+source/anacron/+bug/2006589/+attachment/5656397/+files/anacron_2.3-33ubuntu1.dsc-to-anacron_2.3-33ubuntu2.dsc |
|
2023-03-22 12:35:02 |
Adrien Nader |
description |
As hinted by https://lists.debian.org/debian-devel-announce/2022/11/msg00001.html , anacron 2.3-33's packaging has a bug which disables both the timer and service when its postrm script is invoked and that includes upgrades from this package.
We need to work-around this issue since it is the version in kinetic. |
As hinted by https://lists.debian.org/debian-devel-announce/2022/11/msg00001.html , anacron 2.3-33's packaging has a bug which disables both the timer and service when its postrm script is invoked and that includes upgrades from this package.
We need to work-around this issue since it is the version in kinetic.
=== SRU request below ===
[ Impact ]
* Due to an issue in the postrm script of anacron 2.3-33, upgrades
*from* that version disable the anacron service and timer.
Timeline:
- 2.3-32*: not buggy
- 2.3-33*: buggy
- 2.3-34*: buggy
- 2.3-35*: not buggy, no work-around (Debian decided against further
actions due to the affected versions only hitting unstable)
- 2.3-36: not buggy, no work-around
- 2.3-36ubuntu1: not buggy, no work-around
- 2.3-36ubuntu2: not buggy, work-around added
* We need to make sure that users do not upgrade to any version that is
less than 2.3-36ubuntu2 which contains a work-around for the bug in
2.3-33's postrm. This means that security updates must contain the
fix and the work-around, hence this SRU.
There are two aspects to this SRU:
- fixing the bug introduced in 2.3-33 and removed in 2.3-35
(responsible code was reverted back),
- working around the fact that the bug gets triggered when updating
from 2.3-33.
* The fix has been discussed as part of
https://bugs.launchpad.net/ubuntu/+source/anacron/+bug/2006589
The work-around uses 1) preinst to backup the service state before
the buggy postrm script runs, 2) postinst to restore the backup.
[ Test Plan ]
* NB: if you're running Lunar, your anacron.service and anacron.timer
are likely disabled due to this issue.
* Steps to reproduce the issue:
- install anacron-2.3-33* or anacron-2.3-34* (kinetic uses 2.3-33)
- check whether anacron.service (same for anacron.timer) is enabled:
systemctl show anacron.service --property=UnitFileState
- update anacron to any other version before 2.3-36ubuntu2 (including
previous version and including reinstalling the same version);
- check whether anacron.service (same for anacron.timer) is enabled:
systemctl show anacron.service --property=UnitFileState
if the service or timer were enabled before, they will now be
disabled; if they are not disabled, run "systemctl daemon-reload"
and check again
* Steps to test the fix:
- install anacron-2.3-33* or anacron-2.3-34*
- enable anacron.service and anacron.timer:
systemctl enable anacron.service anacron.timer
- update to anacron >= 2.3-36ubuntu2; if you pay attention to the
console output, you will see messages related to the issue
- check that anacron.service and anacron.timer are still enabled:
systemctl show anacron.service --property=UnitFileState
systemctl show anacron.timer --property=UnitFileState
[ Where problems could occur ]
* The fixed version is in lunar and is installed on a number of
machines already with no report so far. Unfortunately there has been
a window of opportunity for people to upgrade to an intermediate and
trigger the issue, therefore preventing the work-around to run. This
is not a specifically a problem with this update but it is a
limitation.
* There is always the possibility that this change breaks anacron.
However, without the work-around, anacron will be disabled silently.
As such, this update cannot make things worse in this regard.
* There is always the possibility of a grave bug that removes
everything on the machine. This is made more likely because the
postinst and postrm scripts are shell scripts and shell script makes
all errors more likely.
The code has however been written defensively, has been reviewed,
has been analyzed with shellcheck and has been tested on several
machines thanks to the update being in lunar. Moreover it does not
use destructive operations like "rm" (the exception is "rmdir
--ignore-fail-on-non-empty" which is zero-risk).
[ Other Info ]
* We should communicate to LL users about this issue once the SRU is
done.
Why wait for the SRU to communicate to users of an unreleased
version? Because it makes the message simpler: "all versions now are
fixed; update and check the service/timer status, you can't stumble
on the issue anymore".
While preparing the SRU, I was also reminded that we've been
including this NEWS file from Debian:
https://salsa.debian.org/debian/anacron/-/raw/0ce23b/debian/NEWS
I've tweaked it but the change isn't present in the lunar package
* Since the only requirement for this SRU is to be present before any
other update of anacron, this should be blocked forever. The bug
report on launchpad has the block-proposed-kinetic tag. |
|
2023-03-22 12:51:12 |
Adrien Nader |
attachment added |
|
anacron_2.3-33ubuntu1.dsc-to-anacron_2.3-33ubuntu2.dsc.diff https://bugs.launchpad.net/ubuntu/+source/anacron/+bug/2006589/+attachment/5656596/+files/anacron_2.3-33ubuntu1.dsc-to-anacron_2.3-33ubuntu2.dsc.diff |
|
2023-03-28 03:16:21 |
Steve Langasek |
nominated for series |
|
Ubuntu Kinetic |
|
2023-03-28 03:16:21 |
Steve Langasek |
bug task added |
|
anacron (Ubuntu Kinetic) |
|
2023-03-28 03:16:28 |
Steve Langasek |
bug |
|
|
added subscriber Steve Langasek |
2023-03-28 07:06:22 |
Adrien Nader |
attachment removed |
anacron_2.3-33ubuntu1.dsc-to-anacron_2.3-33ubuntu2.dsc https://bugs.launchpad.net/ubuntu/+source/anacron/+bug/2006589/+attachment/5656397/+files/anacron_2.3-33ubuntu1.dsc-to-anacron_2.3-33ubuntu2.dsc |
|
|
2023-04-14 16:40:14 |
Steve Langasek |
anacron (Ubuntu Kinetic): status |
New |
Fix Committed |
|
2023-04-14 16:40:16 |
Steve Langasek |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
2023-04-14 16:40:18 |
Steve Langasek |
bug |
|
|
added subscriber SRU Verification |
2023-04-14 16:40:22 |
Steve Langasek |
tags |
block-proposed-kinetic patch |
block-proposed-kinetic patch verification-needed verification-needed-kinetic |
|
2023-06-06 13:37:25 |
Ćukasz Zemczak |
removed subscriber Ubuntu Sponsors |
|
|
|
2023-07-12 10:47:39 |
Adrien Nader |
tags |
block-proposed-kinetic patch verification-needed verification-needed-kinetic |
block-proposed-kinetic patch verification-done-kinetic verification-needed |
|
2023-07-12 10:48:16 |
Adrien Nader |
tags |
block-proposed-kinetic patch verification-done-kinetic verification-needed |
block-proposed-kinetic patch verification-done-kinetic |
|
2023-11-17 11:40:10 |
Launchpad Janitor |
merge proposal linked |
|
https://code.launchpad.net/~mkukri/ubuntu/+source/anacron/+git/anacron/+merge/455778 |
|
2024-07-25 22:16:22 |
Brian Murray |
anacron (Ubuntu Kinetic): status |
Fix Committed |
Won't Fix |
|