Currently the noble repositories are the mostly broken, related to
recent xz backdoor cve (CVE-2024-3094). Meanwhile you may want to add an
override to your apt configuration, create a file in
/etc/apt/preferences.d with contents similar to below, where pinning >
1000 would mean package could be downgraded if there's a version from
more preferred archive.

$ cat /etc/apt/preferences.d/apt-pinning 
Package: *
Pin: release a=noble-updates
Pin-Priority: 1002
Package: *
Pin: release a=noble
Pin-Priority: 1001

You may add noble-security override to the above file if you want to be
future proof, make sure priority is higher (1002 or 1003) than on noble
archive

Package: *
Pin: release a=noble-security
Pin-Priority: 1003

Also after creating this configuration and updating apt repositories
apt-cache policy should be similar to below assuming you're using only
main ubuntu repositories (noble, noble-security, noble-updates, noble-
backports) and nothing else more.

$ apt-cache policy 
Package files:
 100 /var/lib/dpkg/status
     release a=now
1002 http://archive.ubuntu.com/ubuntu noble-updates/multiverse amd64 Packages
     release 
v=24.04,o=Ubuntu,a=noble-updates,n=noble,l=Ubuntu,c=multiverse,b=amd64
     origin archive.ubuntu.com
1002 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 Packages
     release 
v=24.04,o=Ubuntu,a=noble-updates,n=noble,l=Ubuntu,c=universe,b=amd64
     origin archive.ubuntu.com
1002 http://archive.ubuntu.com/ubuntu noble-updates/restricted amd64 Packages
     release 
v=24.04,o=Ubuntu,a=noble-updates,n=noble,l=Ubuntu,c=restricted,b=amd64
     origin archive.ubuntu.com
1002 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 Packages
     release v=24.04,o=Ubuntu,a=noble-updates,n=noble,l=Ubuntu,c=main,b=amd64
     origin archive.ubuntu.com
1001 http://archive.ubuntu.com/ubuntu noble/multiverse amd64 Packages
     release v=24.04,o=Ubuntu,a=noble,n=noble,l=Ubuntu,c=multiverse,b=amd64
     origin archive.ubuntu.com
1001 http://archive.ubuntu.com/ubuntu noble/universe amd64 Packages
     release v=24.04,o=Ubuntu,a=noble,n=noble,l=Ubuntu,c=universe,b=amd64
     origin archive.ubuntu.com
1001 http://archive.ubuntu.com/ubuntu noble/restricted amd64 Packages
     release v=24.04,o=Ubuntu,a=noble,n=noble,l=Ubuntu,c=restricted,b=amd64
     origin archive.ubuntu.com
1001 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages
     release v=24.04,o=Ubuntu,a=noble,n=noble,l=Ubuntu,c=main,b=amd64
     origin archive.ubuntu.com
Pinned packages:

Finally apt-cache policy for gparted & gparted-common packages should be
like this as long as you have the modifications above and also after
repositories are no longer broken it'd be safe to undo the modification.

$ apt-cache policy gparted gparted-common
gparted:
  Installed: (none)
  Candidate: 1.5.0-1
  Version table:
     1.5.0-1 1002
       1002 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 Packages
gparted-common:
  Installed: (none)
  Candidate: 1.5.0-1
  Version table:
     1.5.0-1build2 1001
       1001 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages
     1.5.0-1 1002
       1002 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 Packages


** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-3094

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2060120

Title:
  Unmet dependencies cause gparted to fail to install

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gparted/+bug/2060120/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to