Digging a bit further - this machine was manually dist-upgraded on
30-May-2021 (it has -updates enabled, but is set to install only
security updates automatically.) That update pulled in libglvnd
1.3.2-1~ubuntu0.20.04.1 (source for libegl1, libglvnd0, etc.)

To upgrade to webkit2gtk 2.34.6-0ubuntu0.20.04.1, u-a must install
libopengl0, either 1.3.1-1 from the main archive or
1.3.2-1~ubuntu0.20.04.1 from -updates. However, -updates is not a
trusted source for u-a when configured like this, so the only candidate
is 1.3.1-1. Unfortunately libopengl0 1.3.1-1 depends on
libglvnd0=1.3.1-1, but 1.3.2-1~ubuntu0.20.04.1 is already installed, so
u-a would have to downgrade it which is I guess a decision well beyond
its pay-grade.

I suppose the solution is to find a way to lose the new dependency,
obvious answer would be to backport the fixes in webkit2gtk 2.34.6 to
2.34.4? I assume there is some sort of policy on adding new dependencies
in security updates?

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to unattended-upgrades in
Ubuntu.
https://bugs.launchpad.net/bugs/1963751

Title:
  focal security update 2.34.6-0ubuntu0.20.04.1 cannot be automatically
  installed due to new dependency

Status in unattended-upgrades package in Ubuntu:
  Incomplete

Bug description:
  Version: 2.34.6-0ubuntu0.20.04.1

  This security update for focal does not seem to be automatically
  upgradeable by unattended-upgrades:

  2022-03-05 14:32:35,653 WARNING package libwebkit2gtk-4.0-37 upgradable but 
fails to be marked for upgrade (E:Unable to correct problems, you have held 
broken packages.)
  2022-03-05 14:32:36,685 WARNING package libwebkit2gtk-4.0-37 upgradable but 
fails to be marked for upgrade (E:Unable to correct problems, you have held 
broken packages.)
  2022-03-05 14:32:38,031 INFO No packages found that can be upgraded 
unattended and no pending auto-removals
  2022-03-05 14:32:38,232 INFO Package libjavascriptcoregtk-4.0-18 is kept back 
because a related package is kept back or due to local apt_preferences(5).
  2022-03-05 14:32:38,382 INFO Package libwebkit2gtk-4.0-37 is kept back 
because a related package is kept back or due to local apt_preferences(5).

  apt-mark showhold lists no held packages, and there are no
  apt_preferences set. The actual cause seems to be an extra dependency
  on libopengl0 which has been added with the upgrade. Is this
  intentional?

  ProblemType: Bug
  DistroRelease: Ubuntu 20.04
  Package: libwebkit2gtk-4.0-37 2.34.6-0ubuntu0.20.04.1
  ProcVersionSignature: Ubuntu 5.4.0-100.113-generic 5.4.166
  Uname: Linux 5.4.0-100-generic x86_64
  ApportVersion: 2.20.11-0ubuntu27.21
  Architecture: amd64
  CasperMD5CheckResult: skip
  Date: Sat Mar  5 14:39:24 2022
  InstallationDate: Installed on 2018-06-15 (1358 days ago)
  InstallationMedia: Xubuntu 18.04 LTS "Bionic Beaver" - Release amd64 
(20180426)
  ProcEnviron:
   TERM=screen.xterm-256color
   PATH=(custom, no user)
   LANG=en_GB.UTF-8
   SHELL=/bin/bash
  SourcePackage: webkit2gtk
  UpgradeStatus: Upgraded to focal on 2021-05-30 (278 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/1963751/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to