Debian Bug report logs - #806595
aptitude: Changelog download throws warning: "W: Can't drop privileges for downloading as file …"

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Axel Beckert <abe@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: aptitude: Changelog download throws warning: "W: Can't drop privileges for downloading as file '/tmp/aptitude-root.15442:qGi6mn/aptitudeDownload6J+8J:+PsVGmTNm^.^::Lz:%.Hi55VKA' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)"

Date: Sun, 29 Nov 2015 14:29:22 +0100

[Message part 1 (text/plain, inline)]

Package: aptitude
Version: 0.7.4-2

Hi,

on the commandline as well in the TUI, aptitude throws a warning when
trying to download and display a changelog as root as well as user:

As root:

# aptitude changelog apt > /dev/null
W: Can't drop privileges for downloading as file '/tmp/aptitude-root.15442:qGi6mn/aptitudeDownload6J+8J:+PsVGmTNm^.^::Lz:%.Hi55VKA' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
#

As user:

% aptitude changelog apt > /dev/null
W: chmod 0700 of directory /var/lib/apt/lists/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)
W: chmod 0700 of directory /var/cache/apt/archives/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)
%

It is though able to display the changelog in all cases I tested.

apt-get doesn't show this warning:

# apt-get changelog apt > /dev/null
#

$ apt-get changelog apt > /dev/null
$

-- Package-specific info:

[Message part 2 (text/plain, attachment)]

[Message part 3 (text/plain, inline)]

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (600, 'testing'), (111, 'buildd-unstable'), (111, 'buildd-experimental'), (110, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.3.0-rc5-amd64 (SMP w/4 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages aptitude depends on:
ii  aptitude-common           0.7.4-2
ii  libapt-pkg5.0             1.1.2
ii  libboost-iostreams1.58.0  1.58.0+dfsg-4
ii  libc6                     2.19-22
ii  libcwidget3v5             0.5.17-4
ii  libgcc1                   1:5.2.1-26
ii  libncursesw5              6.0+20151024-2
ii  libsigc++-2.0-0v5         2.6.2-1
ii  libsqlite3-0              3.9.2-1
ii  libstdc++6                5.2.1-26
ii  libtinfo5                 6.0+20151024-2
ii  libxapian22v5             1.2.21-1.2

Versions of packages aptitude recommends:
ii  aptitude-doc-en [aptitude-doc]  0.7.4-2
ii  libparse-debianchangelog-perl   1.2.0-8
ii  sensible-utils                  0.0.9

Versions of packages aptitude suggests:
ii  apt-xapian-index  0.47+nmu2
ii  debtags           2.0.1
ii  tasksel           3.34

-- no debconf information

Message #10 received at 806595@bugs.debian.org (full text, mbox, reply):

From: Axel Beckert <abe@debian.org>

To: 806595@bugs.debian.org

Subject: Re: Bug#806595: aptitude: Changelog download throws warning: "W: Can't drop privileges for downloading as file '/tmp/aptitude-root.15442:qGi6mn/aptitudeDownload6J+8J:+PsVGmTNm^.^::Lz:%.Hi55VKA' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)"

Date: Sun, 29 Nov 2015 15:11:35 +0100

Hi,

Axel Beckert wrote:
> on the commandline as well in the TUI, aptitude throws a warning when
> trying to download and display a changelog as root as well as user:

Forgot to mention: This happens since aptitude has been compiled
against 1.1 and shows up with all three apt releases since then (1.1,
1.1.1 and 1.1.2).

		Regards, Axel
-- 
 ,''`.  |  Axel Beckert <abe@debian.org>, http://people.debian.org/~abe/
: :' :  |  Debian Developer, ftp.ch.debian.org Admin
`. `'   |  4096R: 2517 B724 C5F6 CA99 5329  6E61 2FF9 CD59 6126 16B5
  `-    |  1024D: F067 EA27 26B9 C3FC 1486  202E C09E 1D89 9593 0EDE

Message #17 received at 806595@bugs.debian.org (full text, mbox, reply):

From: Harald Dunkel <harri@afaics.de>

To: 806595@bugs.debian.org

Subject: meeto (attached)

Date: Fri, 4 Dec 2015 07:05:09 +0100

[Message part 1 (text/plain, inline)]

[aptitude_popup.png (image/png, attachment)]

[signature.asc (application/pgp-signature, attachment)]

Message #22 received at 806595@bugs.debian.org (full text, mbox, reply):

From: "Manuel A. Fernandez Montecelo" <manuel.montezelo@gmail.com>

To: Axel Beckert <abe@debian.org>, Harald Dunkel <harri@afaics.de>, 806595@bugs.debian.org

Subject: Re: aptitude: Changelog download throws warning: "W: Can't drop privileges for downloading as file '/tmp/aptitude-root.15442:qGi6mn/aptitudeDownload6J+8J:+PsVGmTNm^.^::Lz:%.Hi55VKA' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)"

Date: Sat, 5 Dec 2015 23:43:49 +0000

Hi,

2015-11-29 13:29 Axel Beckert:
>Package: aptitude
>Version: 0.7.4-2
>
>Hi,
>
>on the commandline as well in the TUI, aptitude throws a warning when
>trying to download and display a changelog as root as well as user:
>
>As root:
>
># aptitude changelog apt > /dev/null
>W: Can't drop privileges for downloading as file '/tmp/aptitude-root.15442:qGi6mn/aptitudeDownload6J+8J:+PsVGmTNm^.^::Lz:%.Hi55VKA' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
>#

That's because libapt attempts to drop privileges and perform operations
as "_apt" user, but since the directory is owned by root, it cannot drop
them (otherwise it would fail to write) and emits the warning.

So

>As user:
>
>% aptitude changelog apt > /dev/null
>W: chmod 0700 of directory /var/lib/apt/lists/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)
>W: chmod 0700 of directory /var/cache/apt/archives/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)

I suppose that as normal user, libapt doesn't do the check mentioned
above (perhaps because uid!=root and assumes that it's "_apt").

In my system, both dirs' permissions are 700 and owned by _apt:root, it
doesn't emit any error and changelog works fine, no warnings.


>It is though able to display the changelog in all cases I tested.

Yes, specially in the case of root it shouldn't stop from actually
showing the changelog.  It's just a warning that will not drop the
privileges, to avoid failing with the operation.


Cheers.
-- 
Manuel A. Fernandez Montecelo <manuel.montezelo@gmail.com>

Message #27 received at 806595@bugs.debian.org (full text, mbox, reply):

From: nfb <notfreebeer@openmailbox.org>

To: 806595@bugs.debian.org

Subject: Re: aptitude: Changelog download throws warning: "W: Can't drop privileges for downloading as file '/tmp/aptitude-root.15442:qGi6mn/aptitudeDownload6J+8J:+PsVGmTNm^.^::Lz:%.Hi55VKA' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)"

Date: Mon, 14 Dec 2015 10:44:35 +0100

I'm getting these same warnings, both for root and regular user, so
i found this bug report.

>In my system, both dirs' permissions are 700 and owned by _apt:root,
>it doesn't emit any error and changelog works fine, no warnings.

Anyway on my system (Debian stretch/testing, aptitude 0.7.4-2):

$ ls -ld /var/lib/apt/lists/partial /var/cache/apt/archives/partial
drwx------ 2 _apt root 4096 dic 14 10:00 /var/cache/apt/archives/partial
drwx------ 2 _apt root 4096 dic 14 09:58 /var/lib/apt/lists/partial

Message #32 received at 806595@bugs.debian.org (full text, mbox, reply):

From: Valentin Samir <Valentin.Samir@crans.org>

To: 806595@bugs.debian.org

Subject: Re: aptitude: Changelog download throws warning: "W: Can't drop privileges for downloading as file '/tmp/aptitude-root.15442:qGi6mn/aptitudeDownload6J+8J:+PsVGmTNm^.^::Lz:%.Hi55VKA' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)"

Date: Mon, 14 Dec 2015 16:24:35 +0100

Idem getting same warning on debian stretch:
 * aptitude changelog

# aptitude changelog apt > /dev/null
W: Can't drop privileges for downloading as file 
'/tmp/aptitude-root.29350:HnwiPQ/aptitudeDownload6J+8J:+PsVGmTNm^.^::Lz:%.Hi55VKA' 
couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission
non accordée)

 * apt-get update

# apt-get update
[...]
Lecture des listes de paquets... Fait
W: Can't drop privileges for downloading as file 
'/var/lib/apt/lists/partial/httpredir.debian.org_debian_dists_jessie_InRelease' 
couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission 
non accordée)


 * update-pepperflashplugin-nonfree --install

# update-pepperflashplugin-nonfree --install
ERROR: failed to retrieve status information from google : W: Can't drop 
privileges for downloading as file 
'./var/lib/apt/lists/partial/dl.google.com_linux_chrome_deb_dists_stable_InRelease' 
couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission 
non accordée)
More information might be available at:
  http://wiki.debian.org/PepperFlashPlayer
root@nashi:/home/valentin# aptitude changelog apt > /dev/null
W: Can't drop privileges for downloading as file 
'/tmp/aptitude-root.29350:HnwiPQ/aptitudeDownload6J+8J:+PsVGmTNm^.^::Lz:%.Hi55VKA' 
couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission 
non accordée)


Permission on /var/lib/apt/lists/partial seems fine :
# ls -ld /var/lib/apt/lists/partial /var/cache/apt/archives/partial
drwx------ 2 _apt root  4096 déc.  14 16:12 
/var/cache/apt/archives/partial
drwx------ 2 _apt root 24576 déc.  14 15:00 /var/lib/apt/lists/partial

Message #37 received at 806595@bugs.debian.org (full text, mbox, reply):

From: kay <kay.diam@gmail.com>

To: 806595@bugs.debian.org

Subject: Workaround

Date: Thu, 17 Dec 2015 17:22:52 +0100

Have faced same issue. Here is my workaround.

--- /usr/sbin/update-pepperflashplugin-nonfree.orig     2015-12-17
17:22:00.184075270 +0100
+++ /usr/sbin/update-pepperflashplugin-nonfree  2015-12-17
17:21:40.280204140 +0100
@@ -17,6 +17,8 @@

set -e

+SUDO="sudo -u _apt"
+
return_0() {
       return 0
}
@@ -112,7 +114,7 @@
latestfile=latest-$variant-verified.txt
[ "$verified" != "no" ] || latestfile=latest-$variant.txt

-UNPACKDIR=`mktemp -d /tmp/pepperflashplugin-nonfree.XXXXXXXXXX` ||
die_hard "mktemp failed"
+UNPACKDIR=`$SUDO mktemp -d /tmp/pepperflashplugin-nonfree.XXXXXXXXXX`
|| die_hard "mktemp failed"
echo "$UNPACKDIR" | grep -q "^/tmp/pepperflashplugin-nonfree\." ||
die_hard "paranoia"
cd "$UNPACKDIR" || die_hard "cd failed"

@@ -169,7 +171,7 @@
       deb [arch=$arch] http://dl.google.com/linux/chrome/deb/ stable main
       EOF

-       gpg --quiet --no-permission-warning --homedir "etc/apt"
--import /usr/lib/pepperflashplugin-nonfree/pubkey-google.txt
+       $SUDO gpg --quiet --no-permission-warning --homedir "etc/apt"
--import /usr/lib/pepperflashplugin-nonfree/pubkey-google.txt

       [ "$verbose" != "yes" ] || echo "doing apt-get update on google
repository"
       stdouterr=`APT_CONFIG=apt.conf apt-get --quiet --quiet update 2>&1`

Message #42 received at 806595@bugs.debian.org (full text, mbox, reply):

From: Vincent Lefevre <vincent@vinc17.net>

To: kay <kay.diam@gmail.com>, 806595@bugs.debian.org

Subject: Re: Bug#806595: Workaround

Date: Sat, 26 Dec 2015 11:57:38 +0100

On 2015-12-17 17:22:52 +0100, kay wrote:
> Have faced same issue. Here is my workaround.
> 
> --- /usr/sbin/update-pepperflashplugin-nonfree.orig     2015-12-17
> 17:22:00.184075270 +0100
> +++ /usr/sbin/update-pepperflashplugin-nonfree  2015-12-17
> 17:21:40.280204140 +0100
[...]

This is unrelated. I don't have this file installed.

-- 
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Message #51 received at 806595@bugs.debian.org (full text, mbox, reply):

From: Marcel Partap <mpartap@gmx.net>

To: 806595@bugs.debian.org

Subject: stupid by design?

Date: Thu, 4 Feb 2016 11:09:47 +0100

Uhhm.. so why does it try to write to a dir calculably owned by root
with dropped privileges in the first place? Somewhat bothersome :/

Message #56 received at 806595@bugs.debian.org (full text, mbox, reply):

From: "Manuel A. Fernandez Montecelo" <manuel.montezelo@gmail.com>

To: Marcel Partap <mpartap@gmx.net>, 806595@bugs.debian.org

Subject: aptitude: Changelog download throws warning: "W: Can't drop privileges for downloading as file '/tmp/aptitude-root.15442:qGi6mn/aptitudeDownload6J+8J:+PsVGmTNm^.^::Lz:%.Hi55VKA' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)"

Date: Sat, 6 Feb 2016 15:40:03 +0000

2016-02-04 10:09 Marcel Partap:
>Uhhm.. so why does it try to write to a dir calculably owned by root
>with dropped privileges in the first place? Somewhat bothersome :/

Because libapt changed the behaviour recently:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806595#22


Cheers.
-- 
Manuel A. Fernandez Montecelo <manuel.montezelo@gmail.com>

Message #61 received at 806595@bugs.debian.org (full text, mbox, reply):

From: Matijs van Zuijlen <matijs@matijs.net>

To: 806595@bugs.debian.org

Subject: Re: aptitude: Changelog download throws warning: "W: Can't drop privileges for downloading as file '/tmp/aptitude-root.15442:qGi6mn/aptitudeDownload6J+8J:+PsVGmTNm^.^::Lz:%.Hi55VKA' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)"

Date: Tue, 9 Feb 2016 18:41:00 +0100

[Message part 1 (text/plain, inline)]

Hi,

On Sat, 5 Dec 2015 23:43:49 +0000 "Manuel A. Fernandez Montecelo"
<manuel.montezelo@gmail.com> wrote:
> Hi,
> 
> 2015-11-29 13:29 Axel Beckert:
> >Package: aptitude
> >Version: 0.7.4-2
> >
> >Hi,
> >
> >on the commandline as well in the TUI, aptitude throws a warning when
> >trying to download and display a changelog as root as well as user:
> >
> >As root:
> >
> ># aptitude changelog apt > /dev/null
> >W: Can't drop privileges for downloading as file '/tmp/aptitude-root.15442:qGi6mn/aptitudeDownload6J+8J:+PsVGmTNm^.^::Lz:%.Hi55VKA' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
> >#
> 
> That's because libapt attempts to drop privileges and perform operations
> as "_apt" user, but since the directory is owned by root, it cannot drop
> them (otherwise it would fail to write) and emits the warning.

Is there any way to avoid this warning? It is especially annoying in the TUI,
since it creates a pop-up that needs to be dismissed.

Please note that apt-get does not show this warning, so it doesn't seem to be an
essential feature of the fetching of the change log.

> So
> 
> >As user:
> >
> >% aptitude changelog apt > /dev/null
> >W: chmod 0700 of directory /var/lib/apt/lists/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)
> >W: chmod 0700 of directory /var/cache/apt/archives/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)
> 
> I suppose that as normal user, libapt doesn't do the check mentioned
> above (perhaps because uid!=root and assumes that it's "_apt").
> 
> In my system, both dirs' permissions are 700 and owned by _apt:root, it
> doesn't emit any error and changelog works fine, no warnings.

On my system, these dirs have the same permission and owners, but I do get the
warnings:

[matijs@walnut] ls -ld /var/lib/apt/lists/partial
drwx------ 2 _apt root 32768 Feb  9 17:23 /var/lib/apt/lists/partial
[matijs@walnut] ls -ld /var/cache/apt/archives/partial
drwx------ 2 _apt root 4096 Feb  9 14:44 /var/cache/apt/archives/partial
[matijs@walnut] aptitude changelog apt > /dev/null
W: chmod 0700 of directory /var/lib/apt/lists/partial failed -
SetupAPTPartialDirectory (1: Operation not permitted)
W: chmod 0700 of directory /var/cache/apt/archives/partial failed -
SetupAPTPartialDirectory (1: Operation not permitted)

It seems something else must be wrong.

Kind regards,
-- 
Matijs

[signature.asc (application/pgp-signature, attachment)]

Message #66 received at 806595@bugs.debian.org (full text, mbox, reply):

From: Ben Finney <ben+debian@benfinney.id.au>

To: "Manuel A. Fernandez Montecelo" <manuel.montezelo@gmail.com>, 806595@bugs.debian.org

Subject: Re: Bug#806595: aptitude: Changelog download throws warning: "W: Can't drop privileges for downloading as file …"

Date: Fri, 12 Feb 2016 09:21:30 +1100

[Message part 1 (text/plain, inline)]

Control: found -1 aptitude/0.7.5-3
Control: retitle -1 aptitude: Changelog download throws warning: "W: Can't drop privileges for downloading as file …"

On 05-Dec-2015, Manuel A. Fernandez Montecelo wrote:

> That's because libapt attempts to drop privileges and perform
> operations as "_apt" user, but since the directory is owned by root,
> it cannot drop them (otherwise it would fail to write) and emits the
> warning.

That seems to imply that one solution is to set the ownership of the
temporary directory to “_apt:root”. Yes?

=====
$ sudo aptitude changelog apt > /dev/null
W: Can't drop privileges for downloading as file '/tmp/aptitude-root.1524:QANJmE/aptitudeDownload6J+8J:+PsVGmTNm^.^::Lz:%.Hi55VKA' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
=====

> >% aptitude changelog apt > /dev/null
> >W: chmod 0700 of directory /var/lib/apt/lists/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)
> >W: chmod 0700 of directory /var/cache/apt/archives/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)
> 
> I suppose that as normal user, libapt doesn't do the check mentioned
> above (perhaps because uid!=root and assumes that it's "_apt").
> 
> In my system, both dirs' permissions are 700 and owned by _apt:root, it
> doesn't emit any error and changelog works fine, no warnings.

On this system, both directories are permissions 700 and owned by
“_apt:root”, just as you describe. Yet on this system the warnings occur:

=====
$ ls -ld /var/lib/apt/lists/partial/ /var/cache/apt/archives/partial/
drwx------ 2 _apt root 20480 Feb 12 09:07 /var/cache/apt/archives/partial/
drwx------ 2 _apt root 12288 Feb 12 08:55 /var/lib/apt/lists/partial/

$ aptitude changelog apt > /dev/null
W: chmod 0700 of directory /var/lib/apt/lists/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)
W: chmod 0700 of directory /var/cache/apt/archives/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)
=====

There must be some extra difference, more than the ownership or
permission of those directories.

-- 
 \       “As far as the laws of mathematics refer to reality, they are |
  `\    not certain, and as far as they are certain, they do not refer |
_o__)                              to reality.” —Albert Einstein, 1983 |
Ben Finney <ben@benfinney.id.au>

[signature.asc (application/pgp-signature, inline)]

Message #75 received at 806595@bugs.debian.org (full text, mbox, reply):

From: "Manuel A. Fernandez Montecelo" <manuel.montezelo@gmail.com>

To: Matijs van Zuijlen <matijs@matijs.net>, Ben Finney <ben+debian@benfinney.id.au>, 806595@bugs.debian.org

Subject: Re: aptitude: Changelog download throws warning: "W: Can't drop privileges for downloading as file '/tmp/aptitude-root.15442:qGi6mn/aptitudeDownload6J+8J:+PsVGmTNm^.^::Lz:%.Hi55VKA' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)"

Date: Fri, 12 Feb 2016 00:32:47 +0000

Hi,

2016-02-09 17:41 Matijs van Zuijlen:
>
>Is there any way to avoid this warning? It is especially annoying in the TUI,
>since it creates a pop-up that needs to be dismissed.


2016-02-11 22:21 Ben Finney:
>
>There must be some extra difference, more than the ownership or
>permission of those directories.


There are several problems and behaviours depending on which user
launches aptitude, and the version of apt being used (behaviours of apt
related with this changed, as reflected in the different messages of the
report).

The cause of the different warnings/messages merged in this report was
due to different problems as well, which makes things confusing when
replying to the reports, sorry if I misled you.


But in short, I think that I fixed this now after many a session trying
to sort out all of the related problems, hopefully to be released in the
next few days.


Cheers.
-- 
Manuel A. Fernandez Montecelo <manuel.montezelo@gmail.com>

Message #80 received at 806595-close@bugs.debian.org (full text, mbox, reply):

From: mafm@debian.org (Manuel A. Fernandez Montecelo)

To: 806595-close@bugs.debian.org

Subject: Bug#806595: fixed in aptitude 0.7.6-1

Date: Sun, 21 Feb 2016 22:20:13 +0000

Source: aptitude
Source-Version: 0.7.6-1

We believe that the bug you reported is fixed in the latest version of
aptitude, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 806595@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Manuel A. Fernandez Montecelo <mafm@debian.org> (supplier of updated aptitude package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 21 Feb 2016 20:03:52 +0000
Source: aptitude
Binary: aptitude aptitude-common aptitude-doc-cs aptitude-doc-en aptitude-doc-es aptitude-doc-fi aptitude-doc-fr aptitude-doc-it aptitude-doc-ja aptitude-doc-ru
Architecture: source all amd64
Version: 0.7.6-1
Distribution: unstable
Urgency: low
Maintainer: Aptitude Development Team <aptitude-devel@lists.alioth.debian.org>
Changed-By: Manuel A. Fernandez Montecelo <mafm@debian.org>
Description:
 aptitude   - terminal-based package manager
 aptitude-common - architecture independent files for the aptitude package manager
 aptitude-doc-cs - Czech manual for aptitude, a terminal-based package manager
 aptitude-doc-en - English manual for aptitude, a terminal-based package manager
 aptitude-doc-es - Spanish manual for aptitude, a terminal-based package manager
 aptitude-doc-fi - Finnish manual for aptitude, a terminal-based package manager
 aptitude-doc-fr - French manual for aptitude, a terminal-based package manager
 aptitude-doc-it - Italian manual for aptitude, a terminal-based package manager
 aptitude-doc-ja - Japanese manual for aptitude, a terminal-based package manager
 aptitude-doc-ru - Russian manual for aptitude, a terminal-based package manager
Closes: 110685 121313 159584 174820 302784 317928 319782 414150 430392 434502 445034 445206 456822 469219 475802 496728 497299 498239 498440 508428 535635 537735 539978 555014 563877 568548 576212 576319 582064 585182 607444 620782 639789 675833 686573 691874 697736 718802 729349 738345 757940 760610 773023 787663 797527 798320 803011 803980 806595 807545 807852 808882 808985 810020 810221 810651 811400 812397 812864 813319 814408
Changes:
 aptitude (0.7.6-1) unstable; urgency=low
 .
   [ Manuel A. Fernandez Montecelo ]
   * New upstream release. Please see /usr/share/aptitude/NEWS for a change
     log with more details.
 .
     - New features:
       * [cmdline] "show -v" shows all hashes, not only MD5Sum
       * Improvements to "why"/"why-not" (Closes: #729349)
       * Add support to clean the packages downloaded after successful
         install or similar operations (config option ::Clean-After-Install)
         (Closes: #110685)
       * [curses] "Keep" now works in version nodes (Closes: #585182)
       * [curses] "Install" on virtual packages now installs single candidate,
         or emits an error if there are no candidates or more than one
         (Closes: #174820)
       * [curses] Dependency subtrees are now sorted in a pre-determined order
         (Closes: #808882)
       * Show Origin URI for packages being untrusted when asking for
         confirmation (Closes: #582064)
       * [curses] In package info screen, "Packages depending on [this]" are
         further split based on the virtual (provided) packages that they depend
         upon (Closes: #159584, #760610)
       * [cmdline] "search" and "versions" do not truncate columns with
         redirections/pipes (Closes: #445206, #496728)
 .
     - Bug fixes:
       * Properly set a default for $XDG_CACHE_HOME if not set. (Closes: #807545)
       * [cmdline] "w" at prompt now actually works (Closes: #555014)
       * Refuse to remove aptitude within aptitude (Closes: #319782, #568548)
       * [cmdline] Address prompt deficiencies related with translation and input
         methods (Closes: #475802)
       * Abort with Failure (rather to continue with the installation) when
         packages fail to be fetched -- except if APT::Get::Fix-Missing is
         present and set to true.  When this happens, the actions in the command
         line also return with non-zero status.  (Closes: #121313, #302784)
       * [cmdline] Abort with Failure when actions cannot be taken
         (Closes: #121313, #430392, #445034, #498239, #576212, #639789, #798320)
       * [curses] Adjust widths and "expand"/"shrink"-ability of some fields so
         Broken count and Download size are shown fully even with 80-width
         terminals (Closes: #810221)
       * [cmdline] Changelog operations now exit with non-zero on errors
         (Closes: #675833)
       * Fix problem showing versioned provides of virtual packages in error
         message
       * Fix problem showing the actual version of the package providing the
         virtual package in error message
       * Avoid loss of automatic flags when packages are marked for removal but
         not removed immediately, and the state is saved in between
         (Closes: #686573, #718802, #787663)
       * Avoid loss of automatic flags when package actions are scheduled
         multiple times before taking place (Closes: #563877)
       * [cmdline] Arguments for "versions" which are not patterns now treated as
         '?exact-name' instead of '?name' (Closes: #691874)
       * [curses] "Cancel pending actions" now reloads the cache (roughly
         equivalent to restarting the program), rather than marking all packages
         as "keep" plus ruining all auto-installed flags and holds
         (Closes: #537735, #576319)
       * Reinstate auto-installed flag when marking packages to keep in apt cache
         (Closes: #508428)
       * Message explaining unability to fetch changelogs now suggests "update"
         operation (Closes: #456822)
       * Do not use ncurses ("visual mode") in dumb terminals (Closes: #317928)
       * [cmdline] Do not show "update" progress in dumb terminals
         (Closes: #757940)
       * [cmdline] Catch exceptions when stdin is not available in prompts
         (Closes: #620782)
       * Brief explanation when column definitions could not be parsed
         (Closes: #813319)
       * Do not download changelogs when they are already being downloaded
         (Closes: #810020)
       * Fix so libapt can drop privileges to _apt:nogroup when downloading from
         the network and use pkgAcqChangelog (Closes: #797527, #806595)
       * Improve support for trace dumps (Closes: #814408)
 .
     - User visible changes:
       * [cmdline] Prompt dialog shows lowercase instead of capitalised
         "yes"/"no" (Closes: #607444)
       * [cmdline] "search" now exits with non-zero on errors or empty results
         (Closes: #497299)
       * Remove the trailing period from some error messages (Closes: #803011)
       * [curses] New style for Download Progress in Status bar, with higher
         contrast (Closes: #803980)
       * "why" modes, group-by modes and log levels should be provided in
         English, translations not accepted anymore (Closes: #738345)
       * [curses] Pressing keybinding "Keep" (":") on package names or versions
         does not remove the auto-installed flag
       * [cmdline] Show error message when using --purge (Closes: #434502)
       * [cmdline] "show" selects by default the candidate version (as documented
         in man page) and shows extra information when the package is installed
         but can be upgraded, rather than showing "not installed"
         (Closes: #539978)
       * [cmdline] Give more prominence to Version field in "show" command by
         showing it as second
       * [cmdline] Improve message about packages similar to mistyped names
         (Closes: #812397)
 .
     - Internal changes:
       * Lazy initialisation and better encapsulation of metadata download cache
         (Closes: #807852)
 .
     - Documentation:
       * manpage:
         * Explain that "why"/"why-not" need a valid package name
           (Closes: #535635)
         * Improve documentation of "forbid-version" (Closes: #773023)
         * Clarify automatic flag treatment with "install" actions
           (Closes: #469219)
         * Fix typo in --autoclean-on-startup (Closes: #812864)
       * Guide/User's Manual:
         * Make images available in the french translation by copying them from
           the original document (Closes: #414150, #697736)
         * Add note about ?upgradable (Closes: #498440)
 .
     - Translation updates:
       * Italian documentation translation by Beatrice Torracca (Closes: #808985)
       * Portuguese translation by Miguel Figueiredo (Closes: #810651)
       * Danish translation by Morten Bo Johansen (Closes: #811400)
 .
   * d/patches:
     - Drop patches that had been picked from the development branch:
       - cherry-pick-e92dd0c1+aba1b455-properly-set-default-XDG_CACHE_HOME.patch
       - fix-807852_modified_bc3b024667a0b6f5c5c7ded59f7b7f80e383603b.patch
     - Add patch to fix problem building due to string formatting and
       strict compiler checks
       - ftbfs-string-format.patch
   * Bump Policy Standards-Version to 3.9.7 (no changes needed)
 .
   [ Axel Beckert ]
   * Drop aptitude-dbg in favour of automatic debug packages.
Checksums-Sha1:
 ebae447e3b7d13d319931e8427897876fad1f0a1 2922 aptitude_0.7.6-1.dsc
 2a3b2a6b9b228cebea686549835e9fbacb9f2e3a 4771588 aptitude_0.7.6.orig.tar.xz
 a0f965e816d6178fc79ce43b8fc44d1424061be9 48824 aptitude_0.7.6-1.debian.tar.xz
 e317771ff561924ad73e1e9bf30e89117496e9c7 1500364 aptitude-common_0.7.6-1_all.deb
 caed993832f1062ec9c8ec75ebf98561ccf6d9ae 20290776 aptitude-dbgsym_0.7.6-1_amd64.deb
 0d3b9a2978b90bba1068123e522e259d25c38f7a 362790 aptitude-doc-cs_0.7.6-1_all.deb
 575650edfee4d59c197383c3a825b3b3c31c9685 430064 aptitude-doc-en_0.7.6-1_all.deb
 2e1f5fc5105331fec23a3037c590386fadd7500b 408228 aptitude-doc-es_0.7.6-1_all.deb
 5b93d153ef1e6acc8c0431b239f300c9ff48c192 269642 aptitude-doc-fi_0.7.6-1_all.deb
 305bcf5c41afaa80f2b1ac1beb43f08181b6f181 310688 aptitude-doc-fr_0.7.6-1_all.deb
 2fa1995a18545cec0de2cae50d2661372e4cac8b 271196 aptitude-doc-it_0.7.6-1_all.deb
 ac3d63bac165a48ff4f6d997c74b5259dbce2de8 366550 aptitude-doc-ja_0.7.6-1_all.deb
 233b950cdc8ab3905b83cdcc63626c6561189618 386774 aptitude-doc-ru_0.7.6-1_all.deb
 815983eb66144da850e80526330602ef3e0ffbe7 1399066 aptitude_0.7.6-1_amd64.deb
Checksums-Sha256:
 8aa9fb27f5f3210c73323c03d691b6243a7f0b5dee37e700a63b45c77fa437d3 2922 aptitude_0.7.6-1.dsc
 d3769226171fc0b9e6e4caccf296792f562e061427149ad27975ffa42e051ec2 4771588 aptitude_0.7.6.orig.tar.xz
 9e737390b860b5e4266c996d9dacbf0dc713cadf9a7afc77ae8007a7dc5da99b 48824 aptitude_0.7.6-1.debian.tar.xz
 57814ba48251d35c26da85e1c23a5ad74fe027a72fa3a34f1e282c16b0cc109c 1500364 aptitude-common_0.7.6-1_all.deb
 687a2dc28a4da621ccb053529c2c46a2296b72b2c79dcc5fe91d03d865cb8d91 20290776 aptitude-dbgsym_0.7.6-1_amd64.deb
 b77f49f42e7b0262841c36ebcdfdd234bd28874049f3eb2bc8ba2c1993ff58da 362790 aptitude-doc-cs_0.7.6-1_all.deb
 bba3bd766fe81c4228d0e8ad581bef7d51e3a2dee36085e1407900053ad1b020 430064 aptitude-doc-en_0.7.6-1_all.deb
 d43afa891f656db02e92b6840f7cda57d160f2912719953a59925e59f6d6b999 408228 aptitude-doc-es_0.7.6-1_all.deb
 c755527c742b68cc2278da16438e5f64b02860465ab955781ba0f2e85cde4884 269642 aptitude-doc-fi_0.7.6-1_all.deb
 0e5605c9050af4da65a222a48724e5e4380c40eeec83535b11da6a2463ba1e85 310688 aptitude-doc-fr_0.7.6-1_all.deb
 6d2bf540cfbba6c266173054be2aecb7a53c616f10421952c10c64baa4a76db3 271196 aptitude-doc-it_0.7.6-1_all.deb
 c642422677ce5cadb2cf732f5ef16e11683da5944a02ebdcb9577230505c66cc 366550 aptitude-doc-ja_0.7.6-1_all.deb
 0817510837aa5efe2f13d34566aa9ec6c5cfd0cfdc9af2c0d9c1f3aa8cbb8ed2 386774 aptitude-doc-ru_0.7.6-1_all.deb
 69e68e428346ce8d726a45aa2c44cc5b00d6ee55b18fc32c859abb110353425e 1399066 aptitude_0.7.6-1_amd64.deb
Files:
 7a369f78d7b523449304ed4db48c5844 2922 admin important aptitude_0.7.6-1.dsc
 f439bee1f3cd91565447cfa15a0517db 4771588 admin important aptitude_0.7.6.orig.tar.xz
 db02d19e9e338f75a3fcb6ce1870fe18 48824 admin important aptitude_0.7.6-1.debian.tar.xz
 dd589e8c9ef6a6efd39e35b84346e026 1500364 admin important aptitude-common_0.7.6-1_all.deb
 039ad6ec2d604ee375a520262004e523 20290776 debug extra aptitude-dbgsym_0.7.6-1_amd64.deb
 100a35715dd62f575ab35d680e29f55e 362790 doc optional aptitude-doc-cs_0.7.6-1_all.deb
 253f9058e065c2b68d6aec11b6a2e859 430064 doc optional aptitude-doc-en_0.7.6-1_all.deb
 2ad5096f5ca2de29f1ef154f1b6b448d 408228 doc optional aptitude-doc-es_0.7.6-1_all.deb
 9fb0fea168f741272dadcffc4a2e10e2 269642 doc optional aptitude-doc-fi_0.7.6-1_all.deb
 2eb447b0011009d4625572e833b466a2 310688 doc optional aptitude-doc-fr_0.7.6-1_all.deb
 87a318c80d5019ffb31862563dd780b4 271196 doc optional aptitude-doc-it_0.7.6-1_all.deb
 2a551f9ea320d1cf8b216a7bf0bb7c0d 366550 doc optional aptitude-doc-ja_0.7.6-1_all.deb
 c8990bb21ba3e7599cf08f2df14eefae 386774 doc optional aptitude-doc-ru_0.7.6-1_all.deb
 88f2032290b46a2fe3fa56a0baf685d7 1399066 admin important aptitude_0.7.6-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCgAGBQJWyjLjAAoJEH92BqRF3KgONlMP/1z3cLj1wrVTIswBOPqZLggu
AVuorMsMryvXVI2PdM6Lad5Znr/8xjzO95cn1BZoFwVXEPVDnaIAkDuvEY66vpP9
aWenLbamos+ZYCfOnf7Slep2sRI1SaGaZlx8HocDqYU/Ya65+ppIrciSKAaueicy
QeD8IqkQczIqEHNLYF8LItVrRHEQ2dcQJfOqbKWmlKlmeft/GVjJJ/kurS0aCkQA
Gun3U8kFFpZjyRVKpTUv6y24HhRDVNr2NQc136EeOh29FSxmbKCXkEEvlP8894FM
T9lqkyWvlp5+2P24zEriCUyaBvRa5gsxqD87+XbqNx8WR+vvHAdM5caWqGA4WBKI
YMxzZNrrBdXN+MoIqMHeCGn/qcf+9zFTMbhzXp+HhsiiC/bZwaUeH18hrc3Cz40m
Q6jR6Q+z5OE8xj/A+xfR+pP03X/b20VVFPNF9Dj4AwN4ngxuK3jnLDpIqyrTqfAV
6fxGkHVUATBcp1n4z0GORDBM5w8xGA8HVs5bPSFpWayX6EgTL9IN2B44x1hzE/f9
JD4AAf9+waSWe1UCBVh3/5zKO85c/6bHdRqFTulMuvOnq2LNCIpLxaGn1gCLo6+K
4lI73YtPQnw+5U3CApKKRcoVfELfNSIwg3+ydf7o5vhQ0yE0SLvm6aeJB14a78C3
wYHiK6FHCuiVIQ3Pm6gm
=72nC
-----END PGP SIGNATURE-----

Message #93 received at 806595@bugs.debian.org (full text, mbox, reply):

From: Jason Woofenden <jason@jasonwoof.com>

To: 806595@bugs.debian.org

Subject: aptitude: now it crashes

Date: Mon, 22 Feb 2016 14:22:17 -0500

Package: aptitude
Version: 0.7.6-1
Severity: normal

Dear Maintainer,

Thanks for working on this!

I just updated everything today (sid) and now instead of the error
dialog about dropping privs, I get a segfault when I press ``shift-C``

	# aptitude
	Ouch!  Got SIGSEGV, dying..
	zsh: segmentation fault  aptitude

Please let me know what I can do to gather more information if that
would be helpful.

I used reportbug to generate the template for this email, so I'm
hoping that you'll find below all the details about my system,
versions, etc that you need.

-- 
Jason



-- Package-specific info:
Terminal: st-256color
$DISPLAY is set.
which aptitude: /usr/bin/aptitude

aptitude version information:
aptitude 0.7.6
Compiler: g++ 5.3.1 20160220
Compiled against:
  apt version 5.0.0
  NCurses version 6.0
  libsigc++ version: 2.6.2
  Gtk+ support disabled.
  Qt support disabled.

Current library versions:
  NCurses version: ncurses 6.0.20160213
  cwidget version: 0.5.17
  Apt version: 5.0.0

aptitude linkage:
	linux-gate.so.1 (0xb77a2000)
	libapt-pkg.so.5.0 => /usr/lib/i386-linux-gnu/libapt-pkg.so.5.0 (0xb7225000)
	libncursesw.so.5 => /lib/i386-linux-gnu/libncursesw.so.5 (0xb71f0000)
	libtinfo.so.5 => /lib/i386-linux-gnu/libtinfo.so.5 (0xb71cb000)
	libsigc-2.0.so.0 => /usr/lib/i386-linux-gnu/libsigc-2.0.so.0 (0xb71c4000)
	libcwidget.so.3 => /usr/lib/i386-linux-gnu/libcwidget.so.3 (0xb70c1000)
	libsqlite3.so.0 => /usr/lib/i386-linux-gnu/libsqlite3.so.0 (0xb6fdf000)
	libboost_iostreams.so.1.58.0 => /usr/lib/i386-linux-gnu/libboost_iostreams.so.1.58.0 (0xb6fc6000)
	libboost_filesystem.so.1.58.0 => /usr/lib/i386-linux-gnu/libboost_filesystem.so.1.58.0 (0xb6fac000)
	libboost_system.so.1.58.0 => /usr/lib/i386-linux-gnu/libboost_system.so.1.58.0 (0xb6fa7000)
	libxapian.so.22 => /usr/lib/i386-linux-gnu/sse2/libxapian.so.22 (0xb6d9d000)
	libpthread.so.0 => /lib/i386-linux-gnu/i686/cmov/libpthread.so.0 (0xb6d80000)
	libstdc++.so.6 => /usr/lib/i386-linux-gnu/libstdc++.so.6 (0xb6c10000)
	libm.so.6 => /lib/i386-linux-gnu/i686/cmov/libm.so.6 (0xb6bc2000)
	libgcc_s.so.1 => /lib/i386-linux-gnu/libgcc_s.so.1 (0xb6ba5000)
	libc.so.6 => /lib/i386-linux-gnu/i686/cmov/libc.so.6 (0xb69ed000)
	libutil.so.1 => /lib/i386-linux-gnu/i686/cmov/libutil.so.1 (0xb69e9000)
	libdl.so.2 => /lib/i386-linux-gnu/i686/cmov/libdl.so.2 (0xb69e4000)
	libresolv.so.2 => /lib/i386-linux-gnu/i686/cmov/libresolv.so.2 (0xb69cb000)
	libz.so.1 => /lib/i386-linux-gnu/libz.so.1 (0xb69ae000)
	libbz2.so.1.0 => /lib/i386-linux-gnu/libbz2.so.1.0 (0xb699b000)
	liblzma.so.5 => /lib/i386-linux-gnu/liblzma.so.5 (0xb6972000)
	liblz4.so.1 => /usr/lib/i386-linux-gnu/liblz4.so.1 (0xb695f000)
	librt.so.1 => /lib/i386-linux-gnu/i686/cmov/librt.so.1 (0xb6955000)
	libuuid.so.1 => /lib/i386-linux-gnu/libuuid.so.1 (0xb694f000)
	/lib/ld-linux.so.2 (0x8005b000)

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 4.3.0-1-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages aptitude depends on:
ii  aptitude-common            0.7.6-1
ii  libapt-pkg5.0              1.2.3
ii  libboost-filesystem1.58.0  1.58.0+dfsg-5+b1
ii  libboost-iostreams1.58.0   1.58.0+dfsg-5+b1
ii  libboost-system1.58.0      1.58.0+dfsg-5+b1
ii  libc6                      2.21-9
ii  libcwidget3v5              0.5.17-4+b1
ii  libgcc1                    1:5.3.1-9
ii  libncursesw5               6.0+20160213-1
ii  libsigc++-2.0-0v5          2.6.2-1
ii  libsqlite3-0               3.11.0-1
ii  libstdc++6                 5.3.1-9
ii  libtinfo5                  6.0+20160213-1
ii  libxapian22v5              1.2.22-1

Versions of packages aptitude recommends:
pn  aptitude-doc-en | aptitude-doc  <none>
pn  libparse-debianchangelog-perl   <none>
ii  sensible-utils                  0.0.9

Versions of packages aptitude suggests:
pn  apt-xapian-index  <none>
pn  debtags           <none>
ii  tasksel           3.34

-- no debconf information

Message #98 received at 806595@bugs.debian.org (full text, mbox, reply):

From: Yuri D'Elia <wavexx@thregr.org>

To: Jason Woofenden <jason@jasonwoof.com>, 806595@bugs.debian.org

Subject: Re: Bug#806595: aptitude: now it crashes

Date: Mon, 22 Feb 2016 20:42:29 +0100

> Architecture: i386 (i686)

If it can help, on amd64 it works nicely, but I just had the same crash
on i386.

Message #103 received at 806595@bugs.debian.org (full text, mbox, reply):

From: "Manuel A. Fernandez Montecelo" <manuel.montezelo@gmail.com>

To: Yuri D'Elia <wavexx@thregr.org>

Cc: Jason Woofenden <jason@jasonwoof.com>, 806595@bugs.debian.org

Subject: Re: Bug#806595: aptitude: now it crashes

Date: Mon, 22 Feb 2016 22:07:58 +0000

Control: reopen -1


2016-02-22 19:42 Yuri D'Elia:
>> Architecture: i386 (i686)
>
>If it can help, on amd64 it works nicely, but I just had the same crash
>on i386.

So if somebody can test in non-amd64 arches [1] with this version in
unstable and get a backtrace with gdb or valgrind it would be great.


[1] also working completely fine here, in my usual amd64 machine

-- 
Manuel A. Fernandez Montecelo <manuel.montezelo@gmail.com>

Message #110 received at 806595@bugs.debian.org (full text, mbox, reply):

From: "Manuel A. Fernandez Montecelo" <manuel.montezelo@gmail.com>

To: Yuri D'Elia <wavexx@thregr.org>, Jason Woofenden <jason@jasonwoof.com>, 806595@bugs.debian.org

Subject: Re: Bug#806595: aptitude: now it crashes

Date: Mon, 22 Feb 2016 22:33:49 +0000

Control: notfound -1 aptitude/0.7.6-1
Control: close -1


2016-02-22 22:07 To Yuri D'Elia:
>Control: reopen -1
>
>
>2016-02-22 19:42 Yuri D'Elia:
>>>Architecture: i386 (i686)
>>
>>If it can help, on amd64 it works nicely, but I just had the same crash
>>on i386.
>
>So if somebody can test in non-amd64 arches [1] with this version in
>unstable and get a backtrace with gdb or valgrind it would be great.
>
>
>[1] also working completely fine here, in my usual amd64 machine

Actually, the crash is probably not related to the original problem
reported in #806595, so it'll be better to submit a new bug report
instead of carrying the (likely unrelated) information around.

So Jason, could you please report this as a new bug instead (same as you
did, but sending the bug to "submit@bugs.debian.org" instead of
"806595@bugs.debian.org"), and ideally with the backtrace?  If you need
help please tell.


Cheers.
-- 
Manuel A. Fernandez Montecelo <manuel.montezelo@gmail.com>

Message #123 received at 806595@bugs.debian.org (full text, mbox, reply):

From: Jason Woofenden <jason@jasonwoof.com>

To: 806595@bugs.debian.org

Subject: Re: Bug#806595: aptitude: now it crashes

Date: Tue, 23 Feb 2016 00:58:28 -0500

OK, I created a new bug for the segfault:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=815635

With a backtrace and everything :)

-- 
Jason

Send a report that this bug log contains spam.