[Bug 1346973] [NEW] Please backport apt 1.0.1ubuntu2.2 (main) from trusty-proposed

Jorge Niedbalski 1346973 at bugs.launchpad.net
Tue Jul 22 15:47:01 UTC 2014


Public bug reported:

Please backport apt 1.0.1ubuntu2.2 (main) from trusty-proposed to
precise.

Reason for the backport:
========================

APT 0.8.16~exp12ubuntu10.10 in precise turned off InRelease support
(successor to the split Release.gpg/Release file design on the mirrors)
due to CVE-2013-1051 / USN-1762-1

Also a cherry-picking of changes has turned out to be much more intrusive than expected.
InRelease files are gpg clearsigned so all of the gpg validation logic needs to be re-imported as well, which makes a SRU a very difficult exercise. 

Testing:
========
Mark off items in the checklist [X] as you test them, but please leave the checklist so that backporters can quickly evaluate the state of testing.

* precise:
[X] Package builds without modification
[X] libapt-inst1.5 installs cleanly and runs
[X] apt-doc installs cleanly and runs
[X] apt-transport-https installs cleanly and runs
[X] libapt-pkg-doc installs cleanly and runs
[X] apt installs cleanly and runs
[X] apt-utils installs cleanly and runs
[X] libapt-pkg-dev installs cleanly and runs
[X] libapt-pkg4.12 installs cleanly and runs

Reverse dependencies:
=====================
The following reverse-dependencies need to be tested against the new version of apt. For reverse-build-dependencies (-Indep), please test that the package still builds against the new apt. For reverse-dependencies, please test that the version of the package currently in the release still works with the new apt installed. Reverse- Recommends, Suggests, and Enhances don't need to be tested, and are listed for completeness-sake.

libapt-inst1.5
--------------

apt-doc
-------

apt-transport-https
-------------------
* ubuntu-standard
  [ ] precise (Reverse-Recommends)
* kubuntu-active
  [ ] precise (Reverse-Recommends)

libapt-pkg-doc
--------------

apt
---
* debconf
  [ ] precise (Reverse-Conflicts)
* dwww
  [ ] precise (Reverse-Recommends)
* daptup
  [ ] precise (Reverse-Depends)
* upgrade-system
  [ ] precise (Reverse-Depends)
* apport-retrace
  [ ] precise (Reverse-Depends)
* ara
  [ ] precise (Reverse-Recommends)
* ubuntu-extras-keyring
  [ ] precise (Reverse-Depends)
* squid-deb-proxy-client
  [ ] precise (Reverse-Depends)
* apt-build
  [ ] precise (Reverse-Depends)
* lsb-release
  [ ] precise (Reverse-Recommends)
* srcinst
  [ ] precise (Reverse-Depends)
* unattended-upgrades
  [ ] precise (Reverse-Depends)
* blends-dev
  [ ] precise (Reverse-Depends)
* apt-listchanges
  [ ] precise (Reverse-Depends)
* reprepro
  [ ] precise (Reverse-Recommends)
* add-apt-key
  [ ] precise (Reverse-Depends)
* libsbuild-perl
  [ ] precise (Reverse-Depends)
* debian-installer
  [ ] precise (Reverse-Build-Depends)
* python-reportbug
  [ ] precise (Reverse-Depends)
* cron-apt
  [ ] precise (Reverse-Depends)
* emdebian-archive-keyring
  [ ] precise (Reverse-Depends)
* xapt
  [ ] precise (Reverse-Depends)
* emdebian-grip
  [ ] precise (Reverse-Depends)
* apt-zip
  [ ] precise (Reverse-Depends)
* xara-gtk
  [ ] precise (Reverse-Recommends)
* apt-src
  [ ] precise (Reverse-Depends)
* debtags
  [ ] precise (Reverse-Depends)
  [ ] precise (Reverse-Build-Depends)
* debian-ports-archive-keyring
  [ ] precise (Reverse-Depends)
* ubuntu-minimal
  [ ] precise (Reverse-Depends)
* apt-show-source
  [ ] precise (Reverse-Depends)
* tasksel
  [ ] precise (Reverse-Depends)
* jablicator
  [ ] precise (Reverse-Depends)
* piuparts
  [ ] precise (Reverse-Depends)
* apt-show-versions
  [ ] precise (Reverse-Depends)
* debfoster
  [ ] precise (Reverse-Recommends)
* multistrap
  [ ] precise (Reverse-Depends)
* dctrl-tools
  [ ] precise (Reverse-Suggests)
* auto-apt
  [ ] precise (Reverse-Recommends)
* dpkg
  [ ] precise (Reverse-Suggests)
  [ ] precise (Reverse-Breaks)
* apt-offline
  [ ] precise (Reverse-Depends)
* ubiquity
  [ ] precise (Reverse-Build-Depends)
* xdeb
  [ ] precise (Reverse-Breaks)
* apt-move
  [ ] precise (Reverse-Recommends)
* debian-cd
  [ ] precise (Reverse-Depends)
* deborphan
  [ ] precise (Reverse-Recommends)
* apticron
  [ ] precise (Reverse-Depends)
* wajig
  [ ] precise (Reverse-Depends)
* dpkg-www
  [ ] precise (Reverse-Depends)
* reportbug
  [ ] precise (Reverse-Depends)
* debirf
  [ ] precise (Reverse-Depends)

apt-utils
---------
* debconf
  [ ] precise (Reverse-Recommends)
* aptoncd
  [ ] precise (Reverse-Depends)
* mini-dinstall
  [ ] precise (Reverse-Depends)
* xdeb
  [ ] precise (Reverse-Depends)
* simple-cdd
  [ ] precise (Reverse-Depends)
* oem-config-remaster
  [ ] precise (Reverse-Depends)
* ubuntu-minimal
  [ ] precise (Reverse-Depends)
* autopkgtest
  [ ] precise (Reverse-Recommends)
* sbuild
  [ ] precise (Reverse-Depends)
* debian-installer
  [ ] precise (Reverse-Build-Depends)
* libsbuild-perl
  [ ] precise (Reverse-Depends)
* linaro-image-tools
  [ ] precise (Reverse-Depends)
  [ ] precise (Reverse-Build-Depends)
* debarchiver
  [ ] precise (Reverse-Depends)
* apt-build
  [ ] precise (Reverse-Depends)
* livecd-rootfs
  [ ] precise (Reverse-Depends)
* python-apt
  [ ] precise (Reverse-Build-Depends)
* unattended-upgrades
  [ ] precise (Reverse-Depends)

libapt-pkg-dev
--------------
* qapt
  [ ] precise (Reverse-Build-Depends)
* apt-watch
  [ ] precise (Reverse-Build-Depends)
* debian-xcontrol
  [ ] precise (Reverse-Build-Depends)
* libqapt-dev
  [ ] precise (Reverse-Depends)
* apt-move
  [ ] precise (Reverse-Build-Depends)
* aptitude
  [ ] precise (Reverse-Build-Depends)
* libapt-pkg-perl
  [ ] precise (Reverse-Build-Depends)
* packagekit
  [ ] precise (Reverse-Build-Depends)
* libept-dev
  [ ] precise (Reverse-Depends)
* synaptic
  [ ] precise (Reverse-Build-Depends)
* openscap
  [ ] precise (Reverse-Build-Depends)
* apt-transport-debtorrent
  [ ] precise (Reverse-Build-Depends)
* postgresql-debversion
  [ ] precise (Reverse-Build-Depends)
* gnome-packagekit
  [ ] precise (Reverse-Build-Depends)
* aptsh
  [ ] precise (Reverse-Build-Depends)
* unity-lens-applications
  [ ] precise (Reverse-Build-Depends)
* adept
  [ ] precise (Reverse-Build-Depends)
* python-apt-dev
  [ ] precise (Reverse-Depends)
* oval-interpreter
  [ ] precise (Reverse-Build-Depends)
* libept
  [ ] precise (Reverse-Build-Depends)
* python-apt
  [ ] precise (Reverse-Build-Depends)
* ruby-debian
  [ ] precise (Reverse-Build-Depends)

libapt-pkg4.12
--------------
* libqapt-runtime
  [ ] precise (Reverse-Depends)
* debian-xcontrol
  [ ] precise (Reverse-Depends)
* postgresql-9.1-debversion
  [ ] precise (Reverse-Depends)
* apt-move
  [ ] precise (Reverse-Depends)
* aptitude
  [ ] precise (Reverse-Depends)
* libapt-pkg-perl
  [ ] precise (Reverse-Depends)
* python3-apt-dbg
  [ ] precise (Reverse-Depends)
* libept1.4.12
  [ ] precise (Reverse-Depends)
* libqapt1
  [ ] precise (Reverse-Depends)
* python-apt-dbg
  [ ] precise (Reverse-Depends)
* apt-transport-debtorrent
  [ ] precise (Reverse-Depends)
* apt-watch-backend
  [ ] precise (Reverse-Depends)
* aptsh
  [ ] precise (Reverse-Depends)
* libapt-inst1.4
  [ ] precise (Reverse-Depends)
* synaptic
  [ ] precise (Reverse-Depends)
* python3-apt
  [ ] precise (Reverse-Depends)
* libopenscap1
  [ ] precise (Reverse-Depends)
* adept
  [ ] precise (Reverse-Depends)
* qapt-deb-installer
  [ ] precise (Reverse-Depends)
* python-apt
  [ ] precise (Reverse-Depends)
* packagekit-backend-aptcc
  [ ] precise (Reverse-Depends)
* ruby-debian
  [ ] precise (Reverse-Depends)
* ovaldi
  [ ] precise (Reverse-Depends)

** Affects: precise-backports
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1346973

Title:
  Please backport apt 1.0.1ubuntu2.2 (main) from trusty-proposed

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1346973/+subscriptions



More information about the ubuntu-backports mailing list