This bug was fixed in the package unattended-upgrades -
1.1ubuntu1.18.04.4
---------------
unattended-upgrades (1.1ubuntu1.18.04.4) bionic; urgency=medium
* Redirect stderr output in upgrade-between-snapshots, too, otherwise it
breaks the test sometimes (LP: #1781446)
unattended-upgrades (1.1ubuntu1.18.04.3) bionic; urgency=medium
* Redirect stderr output in upgrade-all-security, otherwise it breaks the
test (LP: #1781446)
unattended-upgrades (1.1ubuntu1.18.04.2) bionic; urgency=medium
[ Balint Reczey ]
* Clear cache when autoremoval is invalid for a package set marked for
removal and clear cache after failed commits to return from a possibly
invalid state (LP: #1779157)
* Don't start or gracefully stop upgrade on battery (LP: #1773033)
* Skip updates on metered connections (Closes: #855570) (LP: #1781183)
* Add debian/tests/upgrade-all-security to install all current security
updates.
On development releases this tests latest stable, on stable releases it
tests
the release itself.
* Speed up unattended-upgrade (Closes: #892028, #899366) (LP: #1396787)
- Adjust candidates only for packages to be possibly installed
- Filter out packages cheaper when they are not from allowed origins
- Collect autoremovable packages, too, when looking for upgradable ones
- Measure time of running with --dry-run in autopkgtests
* Skip starting init.d script in debhelper-generated postinst part
(LP: #1778800)
[ Ivan Kurnosov ]
* Fixed is_pkgname_in_blacklist to be side-effect free. (LP: #1781176)
Otherwise 'is_pkgname_in_blacklist' mutates the 'pkgs_kept_back' and
'unattended-upgrades' treats the package as a blacklisted candidate
-- Balint Reczey <rbal...@ubuntu.com> Fri, 13 Jul 2018 10:36:23 +0200
** Changed in: unattended-upgrades (Ubuntu Bionic)
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to unattended-upgrades in
Ubuntu.
https://bugs.launchpad.net/bugs/1781176
Title:
Blacklisted packages are included in the "upgradable origin", while
they should not
Status in unattended-upgrades:
Fix Released
Status in unattended-upgrades package in Ubuntu:
In Progress
Status in unattended-upgrades source package in Bionic:
Fix Released
Bug description:
[Impact]
* Reports from u-u incorrectly list packages from non-upgradable
origins as "Packages with upgradable origin but kept back"
* Listing the packages incorrectly is a result of
is_pkgname_in_blacklist() having a side effect and removing the side
effect is part of fixing LP: #1396787 which fix is also being SRU-d.
* The fix is removing the side effect of is_pkgname_in_blacklist()
[Test Case]
* There is a build-time test in test/test_blacklisted_wrong_origin.py
* To reproduce the original problem set up a system where all security
updates are installed but ebtables (from bionic-updates) is not updated:
$ sudo unattended-upgrade --verbose
Initial blacklisted packages:
Initial whitelisted packages:
Starting unattended upgrades script
Allowed origins are: o=Ubuntu,a=bionic, o=Ubuntu,a=bionic-security,
o=UbuntuESM,a=bionic
No packages found that can be upgraded unattended and no pending auto-removals
$ sudo apt upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
apt apt-utils ebtables initramfs-tools initramfs-tools-bin
initramfs-tools-core libapt-inst2.0 libapt-pkg5.0
liblxc-common liblxc1 libpython3-stdlib lxcfs lxd lxd-client netplan.io
networkd-dispatcher nplan
python-apt-common python3 python3-apt python3-minimal
python3-update-manager snapd squashfs-tools
unattended-upgrades update-manager-core update-notifier-common
27 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 24.1 MB of archives.
After this operation, 1454 kB of additional disk space will be used.
Do you want to continue? [Y/n] n
Abort.
* blacklist ebtables, set up emails from u-u, then run u-u again:
$ sudo echo 'Unattended-Upgrade::Package-Blacklist {"ebtables";};' >
/etc/apt/apt.conf.d/51unattended-upgrades-blacklist-ebtables
$ sudo echo 'Unattended-Upgrade::Mail "root";' >
/etc/apt/apt.conf.d/51unattended-upgrades-mail
$ sudo unattended-upgrade --verbose
Initial blacklisted packages: ebtables
Initial whitelisted packages:
Starting unattended upgrades script
Allowed origins are: o=Ubuntu,a=bionic, o=Ubuntu,a=bionic-security,
o=UbuntuESM,a=bionic
Packages that will be upgraded:
* Observe ebtables listed as being kept back and having upgradable origin
with buggy u-u:
$ sudo cat /var/mail/mail
...
Packages with upgradable origin but kept back:
ebtables=20
...
* Upgrade u-u to a fixed version and run it, observing ebtables to be
not listed as having upgradable origin
[Regression Potential]
* Regressions may make packages incorrectly missing from u-u's
report, but the autopkgtests also cover that to some extent.
[Other Info]
* Original report: https://github.com/mvo5/unattended-
upgrades/issues/116
To manage notifications about this bug go to:
https://bugs.launchpad.net/unattended-upgrades/+bug/1781176/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
