Access denied (403) when trying to fetch security updates for Dapper

Matt Zimmerman mdz at
Sat Nov 17 10:33:15 GMT 2007

On Sat, Nov 17, 2007 at 08:21:54PM +1100, Serge de Souza wrote:
> See
> basically a bad push and permissions were changed on the debs to
> prevent them from being downloaded.
> Wouldn't a new release without the broken packages fix the problem of
> people trying to download something they can't?

As you can see from the discussion in the bug report, the circumstances are
as follows:

- This regression only affects specific configurations (apparently those
  using the deprecated smbfs module)

- There is a straightforward workaround (cifs works)

- The vulnerability is not believed to be serious (denial of service only)

Therefore, withdrawing the update in order to fix the problem was deemed an
appropriate response, given the severity of the issue in affected

Preparing and testing a new update is something which takes time, and should
not be rushed.  This temporary emergency measure (which is admittedly
confusing for users) prevents further downloads while a proper response is

 - mdz

More information about the ubuntu-devel mailing list