[Bug 1454902] [NEW] CVE-2015-3456 packages break dependencies on 12.04

Thu May 14 02:02:36 UTC 2015

Public bug reported:

New packages with version 1.0+noroms break dependencies on old packages
from cloud-archive with version 1.5.0+dfsg.

# cat /etc/issue
Ubuntu 12.04.4 LTS \n \l

# apt-get install --upgrade qemu-kvm=1.0+noroms-0ubuntu14.22 qemu-utils=1.0+noroms-0ubuntu14.22
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages were automatically installed and are no longer required:
  linux-headers-3.2.0-64 linux-headers-3.2.0-64-generic
Use 'apt-get autoremove' to remove them.
The following extra packages will be installed:
  qemu-common
The following packages will be REMOVED:
  qemu-system qemu-system-arm qemu-system-common qemu-system-mips qemu-system-misc qemu-system-ppc qemu-system-sparc qemu-system-x86
The following NEW packages will be installed:
  qemu-common
The following packages will be DOWNGRADED:
  qemu-kvm qemu-utils
0 upgraded, 1 newly installed, 2 downgraded, 8 to remove and 50 not upgraded.
Need to get 3,883 kB of archives.
After this operation, 102 MB disk space will be freed.
Do you want to continue [Y/n]? y
Get:1 http://mirror.rackspace.com/ubuntu/ precise-updates/main qemu-utils amd64 1.0+noroms-0ubuntu14.22 [356 kB]
Get:2 http://mirror.rackspace.com/ubuntu/ precise-updates/main qemu-kvm amd64 1.0+noroms-0ubuntu14.22 [3,522 kB]         
Get:3 http://ubuntu-cloud.archive.canonical.com/ubuntu/ precise-updates/havana/main qemu-common all 1.5.0+dfsg-3ubuntu5.4~cloud0 [4,890 B]
Fetched 3,883 kB in 0s (21.9 MB/s)       
dpkg: qemu-system-mips: dependency problems, but removing anyway as you requested:
 qemu-system depends on qemu-system-mips.
(Reading database ... 151360 files and directories currently installed.)
Removing qemu-system-mips ...
dpkg: qemu-system-arm: dependency problems, but removing anyway as you requested:
 qemu-system depends on qemu-system-arm.
Removing qemu-system-arm ...
dpkg: qemu-system-common: dependency problems, but removing anyway as you requested:
 qemu-system-ppc depends on qemu-system-common (>= 1.5.0+dfsg-3ubuntu5.4~cloud0).
 qemu-system-sparc depends on qemu-system-common (>= 1.5.0+dfsg-3ubuntu5.4~cloud0).
 qemu-system-misc depends on qemu-system-common (>= 1.5.0+dfsg-3ubuntu5.4~cloud0).
 qemu-system-x86 depends on qemu-system-common (>= 1.5.0+dfsg-3ubuntu5.4~cloud0); however:
  Package qemu-system-common is to be removed.
Removing qemu-system-common ...
dpkg: qemu-system-sparc: dependency problems, but removing anyway as you requested:
 qemu-system depends on qemu-system-sparc; however:
  Package qemu-system-sparc is to be removed.
Removing qemu-system-sparc ...
dpkg: qemu-system-ppc: dependency problems, but removing anyway as you requested:
 qemu-system depends on qemu-system-ppc; however:
  Package qemu-system-ppc is to be removed.
Removing qemu-system-ppc ...
dpkg: qemu-system-misc: dependency problems, but removing anyway as you requested:
 qemu-system depends on qemu-system-misc; however:
  Package qemu-system-misc is to be removed.
Removing qemu-system-misc ...
Processing triggers for man-db ...
Selecting previously unselected package qemu-common.
(Reading database ... 151273 files and directories currently installed.)
Unpacking qemu-common (from .../qemu-common_1.5.0+dfsg-3ubuntu5.4~cloud0_all.deb) ...
dpkg: warning: downgrading qemu-utils from 1.5.0+dfsg-3ubuntu5.4~cloud0 to 1.0+noroms-0ubuntu14.22.
Preparing to replace qemu-utils 1.5.0+dfsg-3ubuntu5.4~cloud0 (using .../qemu-utils_1.0+noroms-0ubuntu14.22_amd64.deb) ...
Unpacking replacement qemu-utils ...
dpkg: warning: downgrading qemu-kvm from 1.5.0+dfsg-3ubuntu5.4~cloud0 to 1.0+noroms-0ubuntu14.22.
Preparing to replace qemu-kvm 1.5.0+dfsg-3ubuntu5.4~cloud0 (using .../qemu-kvm_1.0+noroms-0ubuntu14.22_amd64.deb) ...
Unpacking replacement qemu-kvm ...
Replaced by files in installed package qemu-system-x86 ...
Processing triggers for man-db ...
Processing triggers for ureadahead ...
Setting up qemu-common (1.5.0+dfsg-3ubuntu5.4~cloud0) ...
Setting up qemu-utils (1.0+noroms-0ubuntu14.22) ...
dpkg: dependency problems prevent configuration of qemu-kvm:
 qemu-system-x86 (1.5.0+dfsg-3ubuntu5.4~cloud0) breaks qemu-kvm (<< 1.2.0.dfsg-1) and is installed.
  Version of qemu-kvm to be configured is 1.0+noroms-0ubuntu14.22.
dpkg: error processing qemu-kvm (--configure):
 dependency problems - leaving unconfigured
No apport report written because the error message indicates its a followup error from a previous failure.
                                                                                                          Errors were encountered while processing:
 qemu-kvm
E: Sub-process /usr/bin/dpkg returned an error code (1)

# apt-get install -f
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Correcting dependencies... Done
The following packages were automatically installed and are no longer required:
  linux-headers-3.2.0-64 linux-headers-3.2.0-64-generic
Use 'apt-get autoremove' to remove them.
The following extra packages will be installed:
  qemu-kvm qemu-system-arm qemu-system-common qemu-system-mips qemu-system-misc qemu-system-ppc qemu-system-sparc qemu-utils
Suggested packages:
  samba vde2 openbios-ppc openhackware debootstrap
The following NEW packages will be installed:
  qemu-system-arm qemu-system-common qemu-system-mips qemu-system-misc qemu-system-ppc qemu-system-sparc
The following packages will be upgraded:
  qemu-kvm qemu-utils
2 upgraded, 6 newly installed, 0 to remove and 50 not upgraded.
1 not fully installed or removed.
Need to get 34.0 MB of archives.
After this operation, 90.9 MB of additional disk space will be used.
Do you want to continue [Y/n]? 
Get:1 http://ubuntu-cloud.archive.canonical.com/ubuntu/ precise-updates/havana/main qemu-utils amd64 1.5.0+dfsg-3ubuntu5.4~cloud0 [810 kB]
Get:2 http://ubuntu-cloud.archive.canonical.com/ubuntu/ precise-updates/havana/main qemu-kvm amd64 1.5.0+dfsg-3ubuntu5.4~cloud0 [6,696 B]
Get:3 http://ubuntu-cloud.archive.canonical.com/ubuntu/ precise-updates/havana/main qemu-system-common amd64 1.5.0+dfsg-3ubuntu5.4~cloud0 [161 kB]
Get:4 http://ubuntu-cloud.archive.canonical.com/ubuntu/ precise-updates/havana/main qemu-system-arm amd64 1.5.0+dfsg-3ubuntu5.4~cloud0 [2,002 kB]
Get:5 http://ubuntu-cloud.archive.canonical.com/ubuntu/ precise-updates/havana/main qemu-system-mips amd64 1.5.0+dfsg-3ubuntu5.4~cloud0 [6,852 kB]
Get:6 http://ubuntu-cloud.archive.canonical.com/ubuntu/ precise-updates/havana/main qemu-system-misc amd64 1.5.0+dfsg-3ubuntu5.4~cloud0 [15.9 MB]
Get:7 http://ubuntu-cloud.archive.canonical.com/ubuntu/ precise-updates/havana/main qemu-system-ppc amd64 1.5.0+dfsg-3ubuntu5.4~cloud0 [5,620 kB]
Get:8 http://ubuntu-cloud.archive.canonical.com/ubuntu/ precise-updates/havana/main qemu-system-sparc amd64 1.5.0+dfsg-3ubuntu5.4~cloud0 [2,615 kB]
Fetched 34.0 MB in 4s (7,011 kB/s)           
  qemu-utils:amd64 conflicts with qemu-kvm:amd64
dpkg: considering removing qemu-kvm in favour of qemu-utils ...
qemu-kvm is not properly installed - ignoring any dependencies on it.
dpkg: yes, will remove qemu-kvm in favour of qemu-utils.
(Reading database ... 151285 files and directories currently installed.)
Preparing to replace qemu-utils 1.0+noroms-0ubuntu14.22 (using .../qemu-utils_1.5.0+dfsg-3ubuntu5.4~cloud0_amd64.deb) ...
Unpacking replacement qemu-utils ...
Processing triggers for man-db ...
Processing triggers for ureadahead ...
dpkg: error processing qemu-kvm (--configure):
 package qemu-kvm is not ready for configuration
 cannot configure (current status `config-files')
E: Sub-process /usr/bin/dpkg returned an error code (1)

root at 597041-compute02:~# apt-get install --upgrade qemu-kvm=1.5.0+dfsg-3ubuntu5.4~cloud0 qemu-utils=1.5.0+dfsg-3ubuntu5.4~cloud0 qemu-system-common=1.5.0+dfsg-3ubuntu5.4~cloud0
Reading package lists... Done
Building dependency tree       
Reading state information... Done
qemu-utils is already the newest version.
qemu-utils set to manually installed.
You might want to run 'apt-get -f install' to correct these:
The following packages have unmet dependencies:
 qemu-system : Depends: qemu-system-arm
               Depends: qemu-system-mips
               Depends: qemu-system-ppc
               Depends: qemu-system-sparc
               Depends: qemu-system-misc
E: Unmet dependencies. Try 'apt-get -f install' with no packages (or specify a solution).

** Affects: qemu-kvm (Ubuntu)
     Importance: Undecided
         Status: New

** Tags: precise

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu-kvm in Ubuntu.
https://bugs.launchpad.net/bugs/1454902

Title:
  CVE-2015-3456 packages break dependencies on 12.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu-kvm/+bug/1454902/+subscriptions