Verified 1.1ubuntu1.18.04.7~16.04.5 on Xenial: root@uu-x-non-minimal-lp-1838917:~# apt list --upgradable Listing... Done dbus/xenial-proposed 1.10.6-1ubuntu3.5 amd64 [upgradable from: 1.10.6-1ubuntu3.4] libdbus-1-3/xenial-proposed 1.10.6-1ubuntu3.5 amd64 [upgradable from: 1.10.6-1ubuntu3.4] libglib2.0-0/xenial-proposed 2.48.2-0ubuntu4.5 amd64 [upgradable from: 2.48.2-0ubuntu4.4] libglib2.0-data/xenial-proposed 2.48.2-0ubuntu4.5 all [upgradable from: 2.48.2-0ubuntu4.4] libpam-modules/xenial-proposed 1.1.8-3.2ubuntu2.2 amd64 [upgradable from: 1.1.8-3.2ubuntu2.1] libpam-modules-bin/xenial-proposed 1.1.8-3.2ubuntu2.2 amd64 [upgradable from: 1.1.8-3.2ubuntu2.1] libpam-runtime/xenial-proposed 1.1.8-3.2ubuntu2.2 all [upgradable from: 1.1.8-3.2ubuntu2.1] libpam-systemd/xenial-proposed 229-4ubuntu21.23 amd64 [upgradable from: 229-4ubuntu21.22] libpam0g/xenial-proposed 1.1.8-3.2ubuntu2.2 amd64 [upgradable from: 1.1.8-3.2ubuntu2.1] libsqlite3-0/xenial-updates,xenial-security 3.11.0-1ubuntu1.3 amd64 [upgradable from: 3.11.0-1ubuntu1.2] libsystemd0/xenial-proposed 229-4ubuntu21.23 amd64 [upgradable from: 229-4ubuntu21.22] libudev1/xenial-proposed 229-4ubuntu21.23 amd64 [upgradable from: 229-4ubuntu21.22] linux-tools-common/xenial-updates,xenial-proposed,xenial-security 4.4.0-170.199 all [upgradable from: 4.4.0-169.198] login/xenial-proposed 1:4.2-3.1ubuntu5.5 amd64 [upgradable from: 1:4.2-3.1ubuntu5.4] passwd/xenial-proposed 1:4.2-3.1ubuntu5.5 amd64 [upgradable from: 1:4.2-3.1ubuntu5.4] python3-distupgrade/xenial-updates 1:16.04.29 all [upgradable from: 1:16.04.27] python3-update-manager/xenial-updates 1:16.04.17 all [upgradable from: 1:16.04.16] snapd/xenial-proposed 2.42.1 amd64 [upgradable from: 2.40] sosreport/xenial-updates 3.6-1ubuntu0.16.04.4 amd64 [upgradable from: 3.6-1ubuntu0.16.04.3] systemd/xenial-proposed 229-4ubuntu21.23 amd64 [upgradable from: 229-4ubuntu21.22] systemd-sysv/xenial-proposed 229-4ubuntu21.23 amd64 [upgradable from: 229-4ubuntu21.22] tshark/xenial-updates,xenial-security 2.6.10-1~ubuntu16.04.0 amd64 [upgradable from: 2.0.2+ga16e22e-1] ubuntu-core-launcher/xenial-proposed 2.42.1 amd64 [upgradable from: 2.40] ubuntu-release-upgrader-core/xenial-updates 1:16.04.29 all [upgradable from: 1:16.04.27] udev/xenial-proposed 229-4ubuntu21.23 amd64 [upgradable from: 229-4ubuntu21.22] uidmap/xenial-proposed 1:4.2-3.1ubuntu5.5 amd64 [upgradable from: 1:4.2-3.1ubuntu5.4] update-manager-core/xenial-updates 1:16.04.17 all [upgradable from: 1:16.04.16] wireshark-common/xenial-updates,xenial-security 2.6.10-1~ubuntu16.04.0 amd64 [upgradable from: 2.0.2+ga16e22e-1] root@uu-x-non-minimal-lp-1838917:~# apt autoremove Reading package lists... Done Building dependency tree Reading state information... Done The following packages will be REMOVED: libdw1 libunwind8 linux-hwe-edge-tools-4.13.0-16 linux-hwe-edge-tools-4.13.0-17 linux-hwe-edge-tools-4.13.0-19 linux-tools-4.13.0-16-generic linux-tools-4.13.0-17-generic linux-tools-4.13.0-19-generic linux-tools-common 0 upgraded, 0 newly installed, 9 to remove and 27 not upgraded. After this operation, 14.1 MB disk space will be freed. Do you want to continue? [Y/n] n Abort. root@uu-x-non-minimal-lp-1838917:~# unattended-upgrade --verbose --debug Initial blacklisted packages: Initial whitelisted packages: Starting unattended upgrades script Allowed origins are: o=Ubuntu,a=xenial, o=Ubuntu,a=xenial-security, o=UbuntuESM,a=xenial Using (^linux-image-[0-9]+\.[0-9\.]+-.*|^linux-headers-[0-9]+\.[0-9\.]+-.*|^linux-image-extra-[0-9]+\.[0-9\.]+-.*|^linux-modules-[0-9]+\.[0-9\.]+-.*|^linux-modules-extra-[0-9]+\.[0-9\.]+-.*|^linux-signed-image-[0-9]+\.[0-9\.]+-.*|^linux-image-unsigned-[0-9]+\.[0-9\.]+-.*|^kfreebsd-image-[0-9]+\.[0-9\.]+-.*|^kfreebsd-headers-[0-9]+\.[0-9\.]+-.*|^gnumach-image-[0-9]+\.[0-9\.]+-.*|^.*-modules-[0-9]+\.[0-9\.]+-.*|^.*-kernel-[0-9]+\.[0-9\.]+-.*|^linux-backports-modules-.*-[0-9]+\.[0-9\.]+-.*|^linux-modules-.*-[0-9]+\.[0-9\.]+-.*|^linux-tools-[0-9]+\.[0-9\.]+-.*|^linux-cloud-tools-[0-9]+\.[0-9\.]+-.*|^linux-buildinfo-[0-9]+\.[0-9\.]+-.*|^linux-source-[0-9]+\.[0-9\.]+-.*|^linux-image-[0-9]+\.[0-9\.]+-.*|^linux-headers-[0-9]+\.[0-9\.]+-.*|^linux-image-extra-[0-9]+\.[0-9\.]+-.*|^linux-modules-[0-9]+\.[0-9\.]+-.*|^linux-modules-extra-[0-9]+\.[0-9\.]+-.*|^linux-signed-image-[0-9]+\.[0-9\.]+-.*|^linux-image-unsigned-[0-9]+\.[0-9\.]+-.*|^kfreebsd-image-[0-9]+\.[0-9\.]+-.*|^kfreebsd-headers-[0-9]+\.[0-9\.]+-.*|^gnumach-image-[0-9]+\.[0-9\.]+-.*|^.*-modules-[0-9]+\.[0-9\.]+-.*|^.*-kernel-[0-9]+\.[0-9\.]+-.*|^linux-backports-modules-.*-[0-9]+\.[0-9\.]+-.*|^linux-modules-.*-[0-9]+\.[0-9\.]+-.*|^linux-tools-[0-9]+\.[0-9\.]+-.*|^linux-cloud-tools-[0-9]+\.[0-9\.]+-.*|^linux-buildinfo-[0-9]+\.[0-9\.]+-.*|^linux-source-[0-9]+\.[0-9\.]+-.*) regexp to find kernel packages Using (^linux-image-5\.0\.0\-36\-generic$|^linux-headers-5\.0\.0\-36\-generic$|^linux-image-extra-5\.0\.0\-36\-generic$|^linux-modules-5\.0\.0\-36\-generic$|^linux-modules-extra-5\.0\.0\-36\-generic$|^linux-signed-image-5\.0\.0\-36\-generic$|^linux-image-unsigned-5\.0\.0\-36\-generic$|^kfreebsd-image-5\.0\.0\-36\-generic$|^kfreebsd-headers-5\.0\.0\-36\-generic$|^gnumach-image-5\.0\.0\-36\-generic$|^.*-modules-5\.0\.0\-36\-generic$|^.*-kernel-5\.0\.0\-36\-generic$|^linux-backports-modules-.*-5\.0\.0\-36\-generic$|^linux-modules-.*-5\.0\.0\-36\-generic$|^linux-tools-5\.0\.0\-36\-generic$|^linux-cloud-tools-5\.0\.0\-36\-generic$|^linux-buildinfo-5\.0\.0\-36\-generic$|^linux-source-5\.0\.0\-36\-generic$|^linux-image-5\.0\.0\-36\-generic$|^linux-headers-5\.0\.0\-36\-generic$|^linux-image-extra-5\.0\.0\-36\-generic$|^linux-modules-5\.0\.0\-36\-generic$|^linux-modules-extra-5\.0\.0\-36\-generic$|^linux-signed-image-5\.0\.0\-36\-generic$|^linux-image-unsigned-5\.0\.0\-36\-generic$|^kfreebsd-image-5\.0\.0\-36\-generic$|^kfreebsd-headers-5\.0\.0\-36\-generic$|^gnumach-image-5\.0\.0\-36\-generic$|^.*-modules-5\.0\.0\-36\-generic$|^.*-kernel-5\.0\.0\-36\-generic$|^linux-backports-modules-.*-5\.0\.0\-36\-generic$|^linux-modules-.*-5\.0\.0\-36\-generic$|^linux-tools-5\.0\.0\-36\-generic$|^linux-cloud-tools-5\.0\.0\-36\-generic$|^linux-buildinfo-5\.0\.0\-36\-generic$|^linux-source-5\.0\.0\-36\-generic$) regexp to find running kernel packages Checking: dbus ([<Origin component:'main' archive:'xenial-proposed' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>]) adjusting candidate version: dbus=1.10.6-1ubuntu3.4 Checking: libdbus-1-3 ([<Origin component:'main' archive:'xenial-proposed' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>]) adjusting candidate version: libdbus-1-3=1.10.6-1ubuntu3.4 ... adjusting candidate version: update-manager-core=1:16.04.12 Checking: wireshark-common ([<Origin component:'universe' archive:'xenial-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>, <Origin component:'universe' archive:'xenial-security' origin:'Ubuntu' label:'Ubuntu' site:'security.ubuntu.com' isTrusted:True>]) pkgs that look like they should be upgraded: libsqlite3-0 linux-tools-common tshark wireshark-common Get:1 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 libjpeg-turbo8 amd64 1.4.2-0ubuntu3.3 [111 kB] Get:2 http://archive.ubuntu.com/ubuntu xenial/main amd64 libjbig0 amd64 2.1-3.1 [26.6 kB] Get:3 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 libsqlite3-0 amd64 3.11.0-1ubuntu1.3 [397 kB] Get:4 http://archive.ubuntu.com/ubuntu xenial/main amd64 libjpeg8 amd64 8c-2ubuntu8 [2194 B] Get:5 http://archive.ubuntu.com/ubuntu xenial/universe amd64 libmaxminddb0 amd64 1.0.4-2.1 [22.8 kB] Get:6 http://archive.ubuntu.com/ubuntu xenial/universe amd64 libnghttp2-14 amd64 1.7.1-1 [71.1 kB] Get:7 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 libtiff5 amd64 4.0.6-1ubuntu0.7 [149 kB] Get:8 http://archive.ubuntu.com/ubuntu xenial/universe amd64 libspandsp2 amd64 0.0.6-2.1 [273 kB] Get:9 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 libssh-gcrypt-4 amd64 0.6.3-4.3ubuntu0.2 [119 kB] Get:10 http://archive.ubuntu.com/ubuntu xenial/main amd64 libsnappy1v5 amd64 1.1.3-2 [16.0 kB] Get:11 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 libwsutil9 amd64 2.6.10-1~ubuntu16.04.0 [55.7 kB] Get:12 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 libwiretap8 amd64 2.6.10-1~ubuntu16.04.0 [176 kB] Get:13 http://archive.ubuntu.com/ubuntu xenial/main amd64 libsbc1 amd64 1.3-1 [30.9 kB] Get:14 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 libwscodecs2 amd64 2.6.10-1~ubuntu16.04.0 [17.6 kB] Get:15 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 libwireshark11 amd64 2.6.10-1~ubuntu16.04.0 [13.5 MB] Get:16 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 linux-tools-common all 4.4.0-170.199 [118 kB] Get:17 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 tshark amd64 2.6.10-1~ubuntu16.04.0 [132 kB] Get:18 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 wireshark-common amd64 2.6.10-1~ubuntu16.04.0 [388 kB] Fetched 15.7 MB in 0s (0 B/s) fetch.run() result: 0 <apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 0 IsTrusted: 1 FileSize: 110750 DestFile:'/var/cache/apt/archives/libjpeg-turbo8_1.4.2-0ubuntu3.3_amd64.deb' DescURI: 'http://archive.ubuntu.com/ubuntu/pool/main/libj/libjpeg-turbo/libjpeg-turbo8_1.4.2-0ubuntu3.3_amd64.deb' ID:1 ErrorText: ''> check_conffile_prompt(/var/cache/apt/archives/libjpeg-turbo8_1.4.2-0ubuntu3.3_amd64.deb) No conffiles in deb /var/cache/apt/archives/libjpeg-turbo8_1.4.2-0ubuntu3.3_amd64.deb (There is no member named 'conffiles') ... <apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 0 IsTrusted: 1 FileSize: 388374 DestFile:'/var/cache/apt/archives/wireshark-common_2.6.10-1~ubuntu16.04.0_amd64.deb' DescURI: 'http://archive.ubuntu.com/ubuntu/pool/universe/w/wireshark/wireshark-common_2.6.10-1~ubuntu16.04.0_amd64.deb' ID:18 ErrorText: ''> check_conffile_prompt(/var/cache/apt/archives/wireshark-common_2.6.10-1~ubuntu16.04.0_amd64.deb) found pkg: wireshark-common No conffiles in deb /var/cache/apt/archives/wireshark-common_2.6.10-1~ubuntu16.04.0_amd64.deb (There is no member named 'conffiles') blacklist: [] whitelist: [] Removing unused kernel packages: linux-tools-4.13.0-19-generic linux-tools-4.13.0-16-generic linux-tools-4.13.0-17-generic (Reading database ... 26521 files and directories currently installed.) Removing linux-tools-4.13.0-16-generic (4.13.0-16.19~16.04.3) ... Removing linux-tools-4.13.0-17-generic (4.13.0-17.20~16.04.1) ... Removing linux-tools-4.13.0-19-generic (4.13.0-19.22~16.04.1) ... Packages that were successfully auto-removed: Packages that are kept back: Packages that will be upgraded: libsqlite3-0 linux-tools-common tshark wireshark-common Writing dpkg log to /var/log/unattended-upgrades/unattended-upgrades-dpkg.log Preconfiguring packages ... Preconfiguring packages ... Selecting previously unselected package libjpeg-turbo8:amd64. (Reading database ... 26490 files and directories currently installed.) Preparing to unpack .../libjpeg-turbo8_1.4.2-0ubuntu3.3_amd64.deb ... Unpacking libjpeg-turbo8:amd64 (1.4.2-0ubuntu3.3) ... Selecting previously unselected package libjbig0:amd64. Preparing to unpack .../libjbig0_2.1-3.1_amd64.deb ... Unpacking libjbig0:amd64 (2.1-3.1) ... Preparing to unpack .../libsqlite3-0_3.11.0-1ubuntu1.3_amd64.deb ... Unpacking libsqlite3-0:amd64 (3.11.0-1ubuntu1.3) over (3.11.0-1ubuntu1.2) ... Selecting previously unselected package libjpeg8:amd64. Preparing to unpack .../libjpeg8_8c-2ubuntu8_amd64.deb ... ... Setting up linux-tools-common (4.4.0-170.199) ... Setting up wireshark-common (2.6.10-1~ubuntu16.04.0) ... Setting up tshark (2.6.10-1~ubuntu16.04.0) ... Processing triggers for libc-bin (2.23-0ubuntu11) ... All upgrades installed (Reading database ... 26634 files and directories currently installed.) Removing libwireshark6:amd64 (2.0.2+ga16e22e-1) ... Removing libwiretap5:amd64 (2.0.2+ga16e22e-1) ... Removing libwsutil6:amd64 (2.0.2+ga16e22e-1) ... Processing triggers for libc-bin (2.23-0ubuntu11) ... Packages that were successfully auto-removed: Packages that are kept back: InstCount=0 DelCount=0 BrokenCount=0 Extracting content from /var/log/unattended-upgrades/unattended-upgrades-dpkg.log since 2019-12-03 16:51:18 root@uu-x-non-minimal-lp-1838917:~#
** Tags removed: verification-needed verification-needed-xenial ** Tags added: verification-done verification-done-xenial -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to unattended-upgrades in Ubuntu. https://bugs.launchpad.net/bugs/1853861 Title: [SRU] Unattended-upgrades silently does not apply updates when MinimalSteps is disabled and there are autoremovable kernels Status in unattended-upgrades package in Ubuntu: Fix Released Status in unattended-upgrades source package in Xenial: Fix Committed Status in unattended-upgrades source package in Bionic: Fix Committed Status in unattended-upgrades source package in Disco: Fix Released Status in unattended-upgrades source package in Eoan: Fix Released Bug description: [Impact] * When autoremovable kernel packages are present on the system, there are updates to apply and Unattended-Upgrade::MinimalSteps is set to "false", the autoremovable kernel packages are not removed and the updates are not applied. * The root cause is u-u not cleaning the dirty cache between operations and also relying on having a cache with packages marked to be installed when applying updates in one shot. * The fix is clearing the cache between operations and marking packages before installing them in one shot. [Test Case] * Install kernel-related packages, mark them as automatically installed to make them auto-removable ones. * Downgrade a few packages to a version lower than what is present in the security pocket. * Set Unattended-Upgrade::MinimalSteps to "false": # echo 'Unattended-Upgrade::MinimalSteps "false";' > /etc/apt/apt.conf.d/51unattended-upgrades-oneshot * Run u-u: # unattended-upgrade --verbose --debug * Observe fixed versions removing the kernel packages properly and also upgrading packages. [Regression Potential] * The changes introduce marking packages to install/upgrade and clearing the cache more often. The added operations slow down u-u, but clearing the cache adds a few 100 milliseconds on typical hardware and marking upgradable packages is also in the same range. * Functional regressions are unlikely due to those changes since the fixes are present in 19.04 and later releases and the extensive autopkgtest also covers when upgrades are performed in minimal steps. [Other Info] * While this bug has a security impact by holding back installation of security updates I don't recommend releasing the fix via the security pocket because this bug occurs only when the local configuration file of u-u is changed and u-u does not hold back upgrades with UCF-managed config file conflicts. See: https://github.com/mvo5/unattended-upgrades/issues/168 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/1853861/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp