Package: apt Version: 0.9.7.9+deb7u4 Severity: important The recent apt security updates broke the Debian derivatives census scripts, various sites now return "Bad header line" and 404 errors. The set of instructions below produces the errors on the second apt-get update run with apt 0.9.7.9+deb7u4 but not with apt 0.9.7.9+deb7u2. I also note that if I use the same sources.list with chdist from devscripts I do *not* get the same errors. This may be the same bug as #762160, I'm not sure. These sources.list files exhibit the issue: https://dex.alioth.debian.org/census/siduction/sources.list https://dex.alioth.debian.org/census/Kali/sources.list https://dex.alioth.debian.org/census/Maemo/sources.list https://dex.alioth.debian.org/census/Canaima/sources.list https://dex.alioth.debian.org/census/Raspbian/sources.list rm -rf sources.list apt.conf apt cat <<EOF > sources.list deb [arch=i386,amd64] http://packages.siduction.org/base unstable main deb-src http://packages.siduction.org/base unstable main deb [arch=i386,amd64] http://packages.siduction.org/fixes unstable main deb-src http://packages.siduction.org/fixes unstable main EOF cat <<EOF > apt.conf Dir "apt"; Dir::State::status "./apt/var/lib/dpkg/status"; Dir::Etc::sourcelist "./sources.list"; EOF mkdir --parents apt/var/lib/dpkg apt/etc/apt/apt.conf.d apt/etc/apt/trusted.gpg.d apt/etc/apt/preferences.d apt/etc/apt/sources.list.d apt/var/lib/apt/lists/partial apt/var/cache/apt/archives/partial touch apt/var/lib/dpkg/status apt/etc/apt/trusted.gpg export APT_CONFIG=`pwd`/apt.conf apt-get update apt-get update -- System Information: Debian Release: 7.6 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.16-1-amd64 (SMP w/4 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C) Shell: /bin/sh linked to /bin/dash Versions of packages apt depends on: ii debian-archive-keyring 2012.4 ii gnupg 1.4.12-7+deb7u6 ii libapt-pkg4.12 0.9.7.9+deb7u4 ii libc6 2.13-38+deb7u4 ii libgcc1 1:4.7.2-5 ii libstdc++6 4.7.2-5 apt recommends no packages. Versions of packages apt suggests: pn apt-doc <none> ii aptitude 0.6.8.2-1 ii dpkg-dev 1.16.15 pn python-apt <none> ii xz-utils 5.1.1alpha+20120614-2 -- no debconf information -- bye, pabs https://wiki.debian.org/PaulWise
Attachment:
signature.asc
Description: This is a digitally signed message part