Bug#657561: apt-get chokes on bad files, needs manual intervention to fix the situation

To: Debian Bug Tracking System <657561@bugs.debian.org>
Subject: Bug#657561: apt-get chokes on bad files, needs manual intervention to fix the situation
From: Michael Deegan <bugs@deegan.id.au>
Date: Tue, 22 May 2012 08:50:01 +0800
Message-id: <[🔎] 20120522005000.GA5055@deegan.id.au>
Reply-to: Michael Deegan <bugs@deegan.id.au>, 657561@bugs.debian.org
Package: apt
Version: 0.9.3
Followup-For: Bug #657561

Hi,

I can confirm this behaviour still exists, and can easily reproduce it:

Just manually edit one or more of /var/lib/apt/lists/*_Release

apt-get update will from that point onward (at least until a _Release file
with a newer timestamp comes along) fail to update correctly.

I'm inclined to suggest removing _Release (and _Release.gpg) files that
fail verification due to bad signatures.

The same issue applies to _InRelease files too, though the error messages
are slightly different:

   W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.iinet.net.au wheezy InRelease: Unknown error executing gpgv

   W: Failed to fetch http://ftp.iinet.net.au/debian/debian/dists/wheezy/InRelease

   W: Some index files failed to download. They have been ignored, or old ones used instead.

I find it odd that apt claimed that the GPG error was an unknown one given
that signing Release files is mainly intended for detecting tampered files,
yet the actual problem is that the file was tampered with. :P

-- Package-specific info:

-- apt-config dump --

APT "";
APT::Architecture "amd64";
APT::Build-Essential "";
APT::Build-Essential:: "build-essential";
APT::Install-Recommends "0";
APT::Install-Suggests "0";
APT::Authentication "";
APT::Authentication::TrustCDROM "true";
APT::NeverAutoRemove "";
APT::NeverAutoRemove:: "^firmware-linux.*";
APT::NeverAutoRemove:: "^linux-firmware$";
APT::NeverAutoRemove:: "^linux-image.*";
APT::NeverAutoRemove:: "^kfreebsd-image.*";
APT::NeverAutoRemove:: "^linux-restricted-modules.*";
APT::NeverAutoRemove:: "^linux-ubuntu-modules-.*";
APT::NeverAutoRemove:: "^gnumach$";
APT::NeverAutoRemove:: "^gnumach-image.*";
APT::Never-MarkAuto-Sections "";
APT::Never-MarkAuto-Sections:: "metapackages";
APT::Never-MarkAuto-Sections:: "restricted/metapackages";
APT::Never-MarkAuto-Sections:: "universe/metapackages";
APT::Never-MarkAuto-Sections:: "multiverse/metapackages";
APT::Never-MarkAuto-Sections:: "oldlibs";
APT::Never-MarkAuto-Sections:: "restricted/oldlibs";
APT::Never-MarkAuto-Sections:: "universe/oldlibs";
APT::Never-MarkAuto-Sections:: "multiverse/oldlibs";
APT::Get "";
APT::Get::Purge "true";
APT::Architectures "";
APT::Architectures:: "amd64";
APT::Compressor "";
APT::Compressor::. "";
APT::Compressor::.::Name ".";
APT::Compressor::.::Extension "";
APT::Compressor::.::Binary "";
APT::Compressor::.::Cost "1";
APT::Compressor::gzip "";
APT::Compressor::gzip::Name "gzip";
APT::Compressor::gzip::Extension ".gz";
APT::Compressor::gzip::Binary "gzip";
APT::Compressor::gzip::Cost "2";
APT::Compressor::gzip::CompressArg "";
APT::Compressor::gzip::CompressArg:: "-9n";
APT::Compressor::gzip::UncompressArg "";
APT::Compressor::gzip::UncompressArg:: "-d";
APT::Compressor::bzip2 "";
APT::Compressor::bzip2::Name "bzip2";
APT::Compressor::bzip2::Extension ".bz2";
APT::Compressor::bzip2::Binary "bzip2";
APT::Compressor::bzip2::Cost "3";
APT::Compressor::bzip2::CompressArg "";
APT::Compressor::bzip2::CompressArg:: "-9";
APT::Compressor::bzip2::UncompressArg "";
APT::Compressor::bzip2::UncompressArg:: "-d";
APT::Compressor::xz "";
APT::Compressor::xz::Name "xz";
APT::Compressor::xz::Extension ".xz";
APT::Compressor::xz::Binary "xz";
APT::Compressor::xz::Cost "4";
APT::Compressor::xz::CompressArg "";
APT::Compressor::xz::CompressArg:: "-6";
APT::Compressor::xz::UncompressArg "";
APT::Compressor::xz::UncompressArg:: "-d";
APT::Compressor::lzma "";
APT::Compressor::lzma::Name "lzma";
APT::Compressor::lzma::Extension ".lzma";
APT::Compressor::lzma::Binary "xz";
APT::Compressor::lzma::Cost "5";
APT::Compressor::lzma::CompressArg "";
APT::Compressor::lzma::CompressArg:: "--format=lzma";
APT::Compressor::lzma::CompressArg:: "-9";
APT::Compressor::lzma::UncompressArg "";
APT::Compressor::lzma::UncompressArg:: "--format=lzma";
APT::Compressor::lzma::UncompressArg:: "-d";
APT::Compressor::::Name "";
APT::Compressor::::Extension ".";
APT::Compressor::::Binary "";
APT::Compressor::::Cost "100";
APT::Compressor::::CompressArg "";
APT::Compressor::::CompressArg:: "-9";
APT::Compressor::::UncompressArg "";
APT::Compressor::::UncompressArg:: "-d";
Dir "/";
Dir::State "var/lib/apt/";
Dir::State::lists "lists/";
Dir::State::cdroms "cdroms.list";
Dir::State::mirrors "mirrors/";
Dir::State::extended_states "extended_states";
Dir::State::status "/var/lib/dpkg/status";
Dir::Cache "var/cache/apt/";
Dir::Cache::archives "archives/";
Dir::Cache::srcpkgcache "srcpkgcache.bin";
Dir::Cache::pkgcache "pkgcache.bin";
Dir::Etc "etc/apt/";
Dir::Etc::sourcelist "sources.list";
Dir::Etc::sourceparts "sources.list.d";
Dir::Etc::vendorlist "vendors.list";
Dir::Etc::vendorparts "vendors.list.d";
Dir::Etc::main "apt.conf";
Dir::Etc::netrc "auth.conf";
Dir::Etc::parts "apt.conf.d";
Dir::Etc::preferences "preferences";
Dir::Etc::preferencesparts "preferences.d";
Dir::Etc::trusted "trusted.gpg";
Dir::Etc::trustedparts "trusted.gpg.d";
Dir::Bin "";
Dir::Bin::methods "/usr/lib/apt/methods";
Dir::Bin::solvers "";
Dir::Bin::solvers:: "/usr/lib/apt/solvers";
Dir::Bin::dpkg "/usr/bin/dpkg";
Dir::Bin::bzip2 "/bin/bzip2";
Dir::Bin::xz "/usr/bin/xz";
Dir::Media "";
Dir::Media::MountPath "/media/apt";
Dir::Log "var/log/apt";
Dir::Log::Terminal "term.log";
Dir::Log::History "history.log";
Dir::Ignore-Files-Silently "";
Dir::Ignore-Files-Silently:: "~$";
Dir::Ignore-Files-Silently:: "\.disabled$";
Dir::Ignore-Files-Silently:: "\.bak$";
Dir::Ignore-Files-Silently:: "\.dpkg-[a-z]+$";
Dir::Ignore-Files-Silently:: "\.save$";
Dir::Ignore-Files-Silently:: "\.orig$";
Acquire "";
Acquire::cdrom "";
Acquire::cdrom::mount "/media/cdrom/";
Acquire::http "";
Acquire::http::Proxy "http://yipyip:3142/";;
Acquire::Languages "";
Acquire::Languages:: "en";
Acquire::Languages:: "none";
DPkg "";
DPkg::Pre-Install-Pkgs "";
DPkg::Pre-Install-Pkgs:: "/usr/bin/apt-listchanges --apt || test $? -ne 10";
DPkg::Pre-Install-Pkgs:: "/usr/sbin/dpkg-preconfigure --apt || true";
DPkg::Tools "";
DPkg::Tools::Options "";
DPkg::Tools::Options::/usr/bin/apt-listchanges "";
DPkg::Tools::Options::/usr/bin/apt-listchanges::Version "2";
DPkg::Post-Invoke "";
DPkg::Post-Invoke:: "if [ -x /usr/bin/debsums ]; then /usr/bin/debsums --generate=nocheck -sp /var/cache/apt/archives; fi";
DPkg::Post-Invoke:: "if [ -x /usr/sbin/localepurge ] && [ $(ps w -p $PPID | grep -c remove) != 1 ]; then /usr/sbin/localepurge; else exit 0; fi";
Unattended-Upgrade "";
Unattended-Upgrade::Allowed-Origins "";
Unattended-Upgrade::Allowed-Origins:: "${distro_id} stable";
Unattended-Upgrade::Allowed-Origins:: "${distro_id} ${distro_codename}-security";
CommandLine "";
CommandLine::AsString "apt-config dump";

-- /etc/apt/preferences --

Package: *
Pin: release l=Unofficial Multimedia Packages, n=squeeze
Pin-Priority: 495

Package: *
Pin: release o=Debian, n=wheezy
Pin-Priority: 490

Package: *
Pin: release l=Unofficial Multimedia Packages, n=wheezy
Pin-Priority: 485

Package: *
Pin: release a=unstable
Pin-Priority: 470


-- /etc/apt/sources.list --

# lenny #######################################################################

#deb http://mirror.waia.asn.au/debian/ lenny main non-free contrib
#deb-src http://mirror.waia.asn.au/debian/ lenny main non-free contrib
#deb http://ftp.iinet.net.au/debian/debian lenny main non-free contrib
#deb-src http://ftp.iinet.net.au/debian/debian lenny main non-free contrib

#deb http://security.debian.org/ lenny/updates main contrib non-free
#deb-src http://security.debian.org/ lenny/updates main contrib non-free

#deb http://www.debian-multimedia.org lenny main
#deb http://mirror.optus.net/debian-multimedia/ lenny main

# backports -------------------------------------------------------------------

#deb http://www.backports.org/debian lenny-backports main contrib non-free

# squeeze #####################################################################

deb http://mirror.waia.asn.au/debian/ squeeze main non-free contrib
deb-src http://mirror.waia.asn.au/debian/ squeeze main non-free contrib
deb http://ftp.iinet.net.au/debian/debian squeeze main non-free contrib
deb-src http://ftp.iinet.net.au/debian/debian squeeze main non-free contrib

deb http://security.debian.org/ squeeze/updates main contrib non-free
#deb-src http://security.debian.org/ squeeze/updates main contrib non-free

#deb http://www.debian-multimedia.org squeeze main
#deb http://mirror.optus.net/debian-multimedia/ squeeze main

# wheezy #####################################################################

deb http://mirror.waia.asn.au/debian/ wheezy main non-free contrib
deb-src http://mirror.waia.asn.au/debian/ wheezy main non-free contrib
deb http://ftp.iinet.net.au/debian/debian wheezy main non-free contrib
deb-src http://ftp.iinet.net.au/debian/debian wheezy main non-free contrib

deb http://security.debian.org/ wheezy/updates main contrib non-free
#deb-src http://security.debian.org/ wheezy/updates main contrib non-free

#deb http://www.debian-multimedia.org wheezy main
#deb http://mirror.optus.net/debian-multimedia/ wheezy main

# unstable/sid ################################################################

deb http://mirror.waia.asn.au/debian/ unstable main non-free contrib
deb-src http://mirror.waia.asn.au/debian/ unstable main non-free contrib
#deb http://ftp.iinet.net.au/debian/debian unstable main non-free contrib
#deb-src http://ftp.iinet.net.au/debian/debian unstable main non-free contrib

# other stuff #################################################################

# stuff whose current versions suck :(
# mrxvt-common missing o_O
#deb http://snapshot.debian.net/archive pool mrxvt

# the modules provided by Linux 2.6.20 require kvm-12.
#deb http://snapshot.debian.net/archive pool kvm

# GTK2 cinepaint - depends on packages that no longer exist!
#deb http://sidux.net/etorix/$(ARCH) ./

# Hugin 0.8
#deb-src http://www.bebt.de/debian/ lenny hugin080

# darktable
#deb http://ppa.launchpad.net/pmjdebruijn/ppa/ubuntu lucid main

deb http://ppa.launchpad.net/jeremy-visser/python-iview/ubuntu lucid main

# f.lux
#deb http://ppa.launchpad.net/kilian/f.lux/ubuntu maverick main

-- System Information:
Debian Release: 6.0.5
  APT prefers stable
  APT policy: (500, 'stable'), (490, 'testing'), (470, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.1.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash

Versions of packages apt depends on:
ii  debian-archive-keyring  2010.08.28
ii  gnupg                   1.4.10-4
ii  libapt-pkg4.12          0.9.3
ii  libc6                   2.13-32
ii  libgcc1                 1:4.7.0-7
ii  libstdc++6              4.7.0-7

apt recommends no packages.

Versions of packages apt suggests:
ii  apt-doc     <none>
ii  aptitude    0.6.7-1
ii  dpkg-dev    1.16.3
ii  python-apt  0.8.4
ii  synaptic    0.75.10
ii  xz-utils    5.0.0-2

-- no debconf information

-MD

-- 
-------------------------------------------------------------------------------
Michael Deegan                Hugaholic                http://www.deegan.id.au/
--------------------- Guvax bs vg nf ribyhgvba va npgvba. ---------------------
Reply to:
Prev by Date: Bug#673908: apt: Recommended May Take Precedence over Installed
Next by Date: Bug#673878: apt segfaults on upgrading nagios-plugins
Previous by thread: Bug#673908: marked as done (apt: Recommended May Take Precedence over Installed)
Next by thread: Re: Bug#673913: upgrade failure in doc-base trigger: /usr/lib/perl5/auto/UUID/UUID.so: undefined symbol: Perl_xs_apiversion_bootcheck
Index(es):
- Date
- Thread