Verified 1.1ubuntu1.18.04.7~16.04.5 on Xenial:

root@uu-x-non-minimal-lp-1838917:~# apt list --upgradable 
Listing... Done
dbus/xenial-proposed 1.10.6-1ubuntu3.5 amd64 [upgradable from: 
1.10.6-1ubuntu3.4]
libdbus-1-3/xenial-proposed 1.10.6-1ubuntu3.5 amd64 [upgradable from: 
1.10.6-1ubuntu3.4]
libglib2.0-0/xenial-proposed 2.48.2-0ubuntu4.5 amd64 [upgradable from: 
2.48.2-0ubuntu4.4]
libglib2.0-data/xenial-proposed 2.48.2-0ubuntu4.5 all [upgradable from: 
2.48.2-0ubuntu4.4]
libpam-modules/xenial-proposed 1.1.8-3.2ubuntu2.2 amd64 [upgradable from: 
1.1.8-3.2ubuntu2.1]
libpam-modules-bin/xenial-proposed 1.1.8-3.2ubuntu2.2 amd64 [upgradable from: 
1.1.8-3.2ubuntu2.1]
libpam-runtime/xenial-proposed 1.1.8-3.2ubuntu2.2 all [upgradable from: 
1.1.8-3.2ubuntu2.1]
libpam-systemd/xenial-proposed 229-4ubuntu21.23 amd64 [upgradable from: 
229-4ubuntu21.22]
libpam0g/xenial-proposed 1.1.8-3.2ubuntu2.2 amd64 [upgradable from: 
1.1.8-3.2ubuntu2.1]
libsqlite3-0/xenial-updates,xenial-security 3.11.0-1ubuntu1.3 amd64 [upgradable 
from: 3.11.0-1ubuntu1.2]
libsystemd0/xenial-proposed 229-4ubuntu21.23 amd64 [upgradable from: 
229-4ubuntu21.22]
libudev1/xenial-proposed 229-4ubuntu21.23 amd64 [upgradable from: 
229-4ubuntu21.22]
linux-tools-common/xenial-updates,xenial-proposed,xenial-security 4.4.0-170.199 
all [upgradable from: 4.4.0-169.198]
login/xenial-proposed 1:4.2-3.1ubuntu5.5 amd64 [upgradable from: 
1:4.2-3.1ubuntu5.4]
passwd/xenial-proposed 1:4.2-3.1ubuntu5.5 amd64 [upgradable from: 
1:4.2-3.1ubuntu5.4]
python3-distupgrade/xenial-updates 1:16.04.29 all [upgradable from: 1:16.04.27]
python3-update-manager/xenial-updates 1:16.04.17 all [upgradable from: 
1:16.04.16]
snapd/xenial-proposed 2.42.1 amd64 [upgradable from: 2.40]
sosreport/xenial-updates 3.6-1ubuntu0.16.04.4 amd64 [upgradable from: 
3.6-1ubuntu0.16.04.3]
systemd/xenial-proposed 229-4ubuntu21.23 amd64 [upgradable from: 
229-4ubuntu21.22]
systemd-sysv/xenial-proposed 229-4ubuntu21.23 amd64 [upgradable from: 
229-4ubuntu21.22]
tshark/xenial-updates,xenial-security 2.6.10-1~ubuntu16.04.0 amd64 [upgradable 
from: 2.0.2+ga16e22e-1]
ubuntu-core-launcher/xenial-proposed 2.42.1 amd64 [upgradable from: 2.40]
ubuntu-release-upgrader-core/xenial-updates 1:16.04.29 all [upgradable from: 
1:16.04.27]
udev/xenial-proposed 229-4ubuntu21.23 amd64 [upgradable from: 229-4ubuntu21.22]
uidmap/xenial-proposed 1:4.2-3.1ubuntu5.5 amd64 [upgradable from: 
1:4.2-3.1ubuntu5.4]
update-manager-core/xenial-updates 1:16.04.17 all [upgradable from: 1:16.04.16]
wireshark-common/xenial-updates,xenial-security 2.6.10-1~ubuntu16.04.0 amd64 
[upgradable from: 2.0.2+ga16e22e-1]
root@uu-x-non-minimal-lp-1838917:~# apt autoremove 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages will be REMOVED:
  libdw1 libunwind8 linux-hwe-edge-tools-4.13.0-16 
linux-hwe-edge-tools-4.13.0-17 linux-hwe-edge-tools-4.13.0-19 
linux-tools-4.13.0-16-generic linux-tools-4.13.0-17-generic
  linux-tools-4.13.0-19-generic linux-tools-common
0 upgraded, 0 newly installed, 9 to remove and 27 not upgraded.
After this operation, 14.1 MB disk space will be freed.
Do you want to continue? [Y/n] n
Abort.
root@uu-x-non-minimal-lp-1838917:~# unattended-upgrade --verbose --debug
Initial blacklisted packages: 
Initial whitelisted packages: 
Starting unattended upgrades script
Allowed origins are: o=Ubuntu,a=xenial, o=Ubuntu,a=xenial-security, 
o=UbuntuESM,a=xenial
Using 
(^linux-image-[0-9]+\.[0-9\.]+-.*|^linux-headers-[0-9]+\.[0-9\.]+-.*|^linux-image-extra-[0-9]+\.[0-9\.]+-.*|^linux-modules-[0-9]+\.[0-9\.]+-.*|^linux-modules-extra-[0-9]+\.[0-9\.]+-.*|^linux-signed-image-[0-9]+\.[0-9\.]+-.*|^linux-image-unsigned-[0-9]+\.[0-9\.]+-.*|^kfreebsd-image-[0-9]+\.[0-9\.]+-.*|^kfreebsd-headers-[0-9]+\.[0-9\.]+-.*|^gnumach-image-[0-9]+\.[0-9\.]+-.*|^.*-modules-[0-9]+\.[0-9\.]+-.*|^.*-kernel-[0-9]+\.[0-9\.]+-.*|^linux-backports-modules-.*-[0-9]+\.[0-9\.]+-.*|^linux-modules-.*-[0-9]+\.[0-9\.]+-.*|^linux-tools-[0-9]+\.[0-9\.]+-.*|^linux-cloud-tools-[0-9]+\.[0-9\.]+-.*|^linux-buildinfo-[0-9]+\.[0-9\.]+-.*|^linux-source-[0-9]+\.[0-9\.]+-.*|^linux-image-[0-9]+\.[0-9\.]+-.*|^linux-headers-[0-9]+\.[0-9\.]+-.*|^linux-image-extra-[0-9]+\.[0-9\.]+-.*|^linux-modules-[0-9]+\.[0-9\.]+-.*|^linux-modules-extra-[0-9]+\.[0-9\.]+-.*|^linux-signed-image-[0-9]+\.[0-9\.]+-.*|^linux-image-unsigned-[0-9]+\.[0-9\.]+-.*|^kfreebsd-image-[0-9]+\.[0-9\.]+-.*|^kfreebsd-headers-[0-9]+\.[0-9\.]+-.*|^gnumach-image-[0-9]+\.[0-9\.]+-.*|^.*-modules-[0-9]+\.[0-9\.]+-.*|^.*-kernel-[0-9]+\.[0-9\.]+-.*|^linux-backports-modules-.*-[0-9]+\.[0-9\.]+-.*|^linux-modules-.*-[0-9]+\.[0-9\.]+-.*|^linux-tools-[0-9]+\.[0-9\.]+-.*|^linux-cloud-tools-[0-9]+\.[0-9\.]+-.*|^linux-buildinfo-[0-9]+\.[0-9\.]+-.*|^linux-source-[0-9]+\.[0-9\.]+-.*)
 regexp to find kernel packages
Using 
(^linux-image-5\.0\.0\-36\-generic$|^linux-headers-5\.0\.0\-36\-generic$|^linux-image-extra-5\.0\.0\-36\-generic$|^linux-modules-5\.0\.0\-36\-generic$|^linux-modules-extra-5\.0\.0\-36\-generic$|^linux-signed-image-5\.0\.0\-36\-generic$|^linux-image-unsigned-5\.0\.0\-36\-generic$|^kfreebsd-image-5\.0\.0\-36\-generic$|^kfreebsd-headers-5\.0\.0\-36\-generic$|^gnumach-image-5\.0\.0\-36\-generic$|^.*-modules-5\.0\.0\-36\-generic$|^.*-kernel-5\.0\.0\-36\-generic$|^linux-backports-modules-.*-5\.0\.0\-36\-generic$|^linux-modules-.*-5\.0\.0\-36\-generic$|^linux-tools-5\.0\.0\-36\-generic$|^linux-cloud-tools-5\.0\.0\-36\-generic$|^linux-buildinfo-5\.0\.0\-36\-generic$|^linux-source-5\.0\.0\-36\-generic$|^linux-image-5\.0\.0\-36\-generic$|^linux-headers-5\.0\.0\-36\-generic$|^linux-image-extra-5\.0\.0\-36\-generic$|^linux-modules-5\.0\.0\-36\-generic$|^linux-modules-extra-5\.0\.0\-36\-generic$|^linux-signed-image-5\.0\.0\-36\-generic$|^linux-image-unsigned-5\.0\.0\-36\-generic$|^kfreebsd-image-5\.0\.0\-36\-generic$|^kfreebsd-headers-5\.0\.0\-36\-generic$|^gnumach-image-5\.0\.0\-36\-generic$|^.*-modules-5\.0\.0\-36\-generic$|^.*-kernel-5\.0\.0\-36\-generic$|^linux-backports-modules-.*-5\.0\.0\-36\-generic$|^linux-modules-.*-5\.0\.0\-36\-generic$|^linux-tools-5\.0\.0\-36\-generic$|^linux-cloud-tools-5\.0\.0\-36\-generic$|^linux-buildinfo-5\.0\.0\-36\-generic$|^linux-source-5\.0\.0\-36\-generic$)
 regexp to find running kernel packages
Checking: dbus ([<Origin component:'main' archive:'xenial-proposed' 
origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: dbus=1.10.6-1ubuntu3.4
Checking: libdbus-1-3 ([<Origin component:'main' archive:'xenial-proposed' 
origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: libdbus-1-3=1.10.6-1ubuntu3.4
...
adjusting candidate version: update-manager-core=1:16.04.12
Checking: wireshark-common ([<Origin component:'universe' 
archive:'xenial-updates' origin:'Ubuntu' label:'Ubuntu' 
site:'archive.ubuntu.com' isTrusted:True>, <Origin component:'universe' 
archive:'xenial-security' origin:'Ubuntu' label:'Ubuntu' 
site:'security.ubuntu.com' isTrusted:True>])
pkgs that look like they should be upgraded: libsqlite3-0
linux-tools-common
tshark
wireshark-common
Get:1 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 libjpeg-turbo8 
amd64 1.4.2-0ubuntu3.3 [111 kB]                                                 
             
Get:2 http://archive.ubuntu.com/ubuntu xenial/main amd64 libjbig0 amd64 2.1-3.1 
[26.6 kB]                                                                       
             
Get:3 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 libsqlite3-0 
amd64 3.11.0-1ubuntu1.3 [397 kB]                                                
               
Get:4 http://archive.ubuntu.com/ubuntu xenial/main amd64 libjpeg8 amd64 
8c-2ubuntu8 [2194 B]                                                            
                     
Get:5 http://archive.ubuntu.com/ubuntu xenial/universe amd64 libmaxminddb0 
amd64 1.0.4-2.1 [22.8 kB]                                                       
                  
Get:6 http://archive.ubuntu.com/ubuntu xenial/universe amd64 libnghttp2-14 
amd64 1.7.1-1 [71.1 kB]                                                         
                  
Get:7 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 libtiff5 amd64 
4.0.6-1ubuntu0.7 [149 kB]                                                       
             
Get:8 http://archive.ubuntu.com/ubuntu xenial/universe amd64 libspandsp2 amd64 
0.0.6-2.1 [273 kB]                                                              
              
Get:9 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 
libssh-gcrypt-4 amd64 0.6.3-4.3ubuntu0.2 [119 kB]                               
                            
Get:10 http://archive.ubuntu.com/ubuntu xenial/main amd64 libsnappy1v5 amd64 
1.1.3-2 [16.0 kB]                                                               
                
Get:11 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 
libwsutil9 amd64 2.6.10-1~ubuntu16.04.0 [55.7 kB]                               
                       
Get:12 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 
libwiretap8 amd64 2.6.10-1~ubuntu16.04.0 [176 kB]                               
                       
Get:13 http://archive.ubuntu.com/ubuntu xenial/main amd64 libsbc1 amd64 1.3-1 
[30.9 kB]                                                                       
               
Get:14 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 
libwscodecs2 amd64 2.6.10-1~ubuntu16.04.0 [17.6 kB]                             
                       
Get:15 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 
libwireshark11 amd64 2.6.10-1~ubuntu16.04.0 [13.5 MB]                           
                       
Get:16 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 
linux-tools-common all 4.4.0-170.199 [118 kB]                                   
                           
Get:17 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 tshark 
amd64 2.6.10-1~ubuntu16.04.0 [132 kB]                                           
                
Get:18 http://archive.ubuntu.com/ubuntu xenial-updates/universe amd64 
wireshark-common amd64 2.6.10-1~ubuntu16.04.0 [388 kB]                          
                       
Fetched 15.7 MB in 0s (0 B/s)                                                   
                                                                                
             
fetch.run() result: 0
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 0 IsTrusted: 1 
FileSize: 110750 
DestFile:'/var/cache/apt/archives/libjpeg-turbo8_1.4.2-0ubuntu3.3_amd64.deb' 
DescURI: 
'http://archive.ubuntu.com/ubuntu/pool/main/libj/libjpeg-turbo/libjpeg-turbo8_1.4.2-0ubuntu3.3_amd64.deb'
 ID:1 ErrorText: ''>
check_conffile_prompt(/var/cache/apt/archives/libjpeg-turbo8_1.4.2-0ubuntu3.3_amd64.deb)
No conffiles in deb 
/var/cache/apt/archives/libjpeg-turbo8_1.4.2-0ubuntu3.3_amd64.deb (There is no 
member named 'conffiles')
...
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 0 IsTrusted: 1 
FileSize: 388374 
DestFile:'/var/cache/apt/archives/wireshark-common_2.6.10-1~ubuntu16.04.0_amd64.deb'
 DescURI: 
'http://archive.ubuntu.com/ubuntu/pool/universe/w/wireshark/wireshark-common_2.6.10-1~ubuntu16.04.0_amd64.deb'
 ID:18 ErrorText: ''>
check_conffile_prompt(/var/cache/apt/archives/wireshark-common_2.6.10-1~ubuntu16.04.0_amd64.deb)
found pkg: wireshark-common
No conffiles in deb 
/var/cache/apt/archives/wireshark-common_2.6.10-1~ubuntu16.04.0_amd64.deb 
(There is no member named 'conffiles')
blacklist: []
whitelist: []
Removing unused kernel packages: linux-tools-4.13.0-19-generic 
linux-tools-4.13.0-16-generic linux-tools-4.13.0-17-generic
(Reading database ... 26521 files and directories currently installed.)
Removing linux-tools-4.13.0-16-generic (4.13.0-16.19~16.04.3) ...
Removing linux-tools-4.13.0-17-generic (4.13.0-17.20~16.04.1) ...
Removing linux-tools-4.13.0-19-generic (4.13.0-19.22~16.04.1) ...
Packages that were successfully auto-removed: 
Packages that are kept back: 
Packages that will be upgraded: libsqlite3-0 linux-tools-common tshark 
wireshark-common
Writing dpkg log to /var/log/unattended-upgrades/unattended-upgrades-dpkg.log
Preconfiguring packages ...
Preconfiguring packages ...
Selecting previously unselected package libjpeg-turbo8:amd64.
(Reading database ... 26490 files and directories currently installed.)
Preparing to unpack .../libjpeg-turbo8_1.4.2-0ubuntu3.3_amd64.deb ...
Unpacking libjpeg-turbo8:amd64 (1.4.2-0ubuntu3.3) ...
Selecting previously unselected package libjbig0:amd64.
Preparing to unpack .../libjbig0_2.1-3.1_amd64.deb ...
Unpacking libjbig0:amd64 (2.1-3.1) ...
Preparing to unpack .../libsqlite3-0_3.11.0-1ubuntu1.3_amd64.deb ...
Unpacking libsqlite3-0:amd64 (3.11.0-1ubuntu1.3) over (3.11.0-1ubuntu1.2) ...
Selecting previously unselected package libjpeg8:amd64.
Preparing to unpack .../libjpeg8_8c-2ubuntu8_amd64.deb ...
...
Setting up linux-tools-common (4.4.0-170.199) ...
Setting up wireshark-common (2.6.10-1~ubuntu16.04.0) ...
Setting up tshark (2.6.10-1~ubuntu16.04.0) ...
Processing triggers for libc-bin (2.23-0ubuntu11) ...
All upgrades installed
(Reading database ... 26634 files and directories currently installed.)
Removing libwireshark6:amd64 (2.0.2+ga16e22e-1) ...
Removing libwiretap5:amd64 (2.0.2+ga16e22e-1) ...
Removing libwsutil6:amd64 (2.0.2+ga16e22e-1) ...
Processing triggers for libc-bin (2.23-0ubuntu11) ...
Packages that were successfully auto-removed: 
Packages that are kept back: 
InstCount=0 DelCount=0 BrokenCount=0
Extracting content from 
/var/log/unattended-upgrades/unattended-upgrades-dpkg.log since 2019-12-03 
16:51:18
root@uu-x-non-minimal-lp-1838917:~# 


** Tags removed: verification-needed verification-needed-xenial
** Tags added: verification-done verification-done-xenial

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to unattended-upgrades in
Ubuntu.
https://bugs.launchpad.net/bugs/1853861

Title:
  [SRU] Unattended-upgrades silently does not apply updates when
  MinimalSteps is disabled and there are autoremovable kernels

Status in unattended-upgrades package in Ubuntu:
  Fix Released
Status in unattended-upgrades source package in Xenial:
  Fix Committed
Status in unattended-upgrades source package in Bionic:
  Fix Committed
Status in unattended-upgrades source package in Disco:
  Fix Released
Status in unattended-upgrades source package in Eoan:
  Fix Released

Bug description:
  [Impact]

   * When autoremovable kernel packages are present on the system, there are 
updates to apply and Unattended-Upgrade::MinimalSteps is set to "false", the 
autoremovable kernel packages are not removed and the updates are not applied.
   * The root cause is u-u not cleaning the dirty cache between operations and 
also relying on having a cache with packages marked to be installed when 
applying updates in one shot.
   * The fix is clearing the cache between operations and marking packages 
before installing them in one shot.

  [Test Case]

   * Install kernel-related packages, mark them as automatically installed to 
make them auto-removable ones.
   * Downgrade a few packages to a version lower than what is present in the 
security pocket.
   * Set Unattended-Upgrade::MinimalSteps to "false":
     # echo 'Unattended-Upgrade::MinimalSteps "false";' > 
/etc/apt/apt.conf.d/51unattended-upgrades-oneshot

   * Run u-u:
     # unattended-upgrade --verbose --debug

   * Observe fixed versions removing the kernel packages properly and
  also upgrading packages.

  [Regression Potential]

   * The changes introduce marking packages to install/upgrade and clearing the 
cache more often. The added operations slow down u-u, but clearing the cache 
adds a few 100 milliseconds on typical hardware and marking upgradable packages 
is also in the same range.
   * Functional regressions are unlikely due to those changes since the fixes 
are present in 19.04 and later releases and the extensive autopkgtest also 
covers when upgrades are performed in minimal steps.

  [Other Info]

   * While this bug has a security impact by holding back installation of 
security updates I don't recommend releasing the fix via the security pocket 
because this bug occurs only when the local configuration file of u-u is 
changed and u-u does not hold back upgrades with UCF-managed config file 
conflicts.
    See: https://github.com/mvo5/unattended-upgrades/issues/168

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/1853861/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to