[Bug 1029046] Re: include system state from apt-clone in apport package hook

[Launchpad Bug Tracker]

This bug was fixed in the package update-manager - 1:0.156.14.9

---------------
update-manager (1:0.156.14.9) precise-proposed; urgency=low

  * No change rebuild to pick up the fixed apt_clone.py

update-manager (1:0.156.14.8) precise-proposed; urgency=low

  * Fix removal_blacklist to blacklist "^screen$" instead of "screen".
    This fixes cases where the upgrade would fail because of a package
    containing "screen" being removed. (LP: #1029531)

update-manager (1:0.156.14.7) precise-proposed; urgency=low

  * DistUpgrade/DistUpgradeMain.py: call clone.save_state with
    scrub_sources set so that VarLogDistUpgradeAptclonesystemstate will be
    included in bug reports again (LP: #1029046)
  * DistUpgrade/DistUpgradeApport.py: check errormsg for the English version of
    the dependency problems error first (LP: #999890)
    - add apt-clone_system_state.tar.gz to white list of files to upload
  * In the apport source package hook collect apt-clone information if the bug
    report is about a distribution upgrade (LP: #1029046)
  * Don't throw exception on socket timeout when downloading metarelease file
    (LP: #818760)
 -- Stephane Graber <stgraber at ubuntu.com>   Thu, 09 Aug 2012 17:05:37 -0400

** Changed in: update-manager (Ubuntu Precise)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to update-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1029046

Title:
  include system state from apt-clone in apport package hook

Status in “update-manager” package in Ubuntu:
  Won't Fix
Status in “update-manager” source package in Precise:
  Fix Released

Bug description:
  As documented in bug 954483 and bug 1004503 update-manager was
  attaching apt-clone system state information which included usernames
  and passwords from apt sources files.  apt-clone has been modified to
  scrub the sources files (bug 1029021) before creating them and update-
  manager should be updated to take advantage of this and start
  including apt system state information again as it is useful in
  debugging distribution upgrades.

  [Impact]
  update-manager is not currently include apt clone system state information when creating apport reports for sending to Launchpad.  This information is essential for debugging distribution upgrades and should be included.

  [Test Case]
  0) Install apt-clone version 0.2.2ubuntu1 as this includes necessary functionality
  1) Create a file /etc/apt/sources.list.d/my-ppa.list with a line like so:
  'deb http://bdmurray:g000dpassw0rd@ppa.launchpad.net/bdmurray/hda/ubuntu precise main'
  2) Edit /etc/default/grub so that you have a line missing a final quote:
  GRUB_CMDLINE_LINUX_DEFAULT="quiet splash
  3) start a distribution upgrade from Oneiric to Precise
  4) there should now be a file in /var/log/dist-upgrade named apt-clone_system_state.tar.gz; copy this to /tmp/ and tar xfvz it
  5) look for bdmurray and g00dpassw0rd in the extracted version of my-ppa.list

  With the version of update-manager from -proposed my-ppa.list should
  contain USERNAME:PASSWORD instead of my nick and password.

  [Regression Potential]
  It is possible that usernames and passwords will appear in apt-clone_system_state.tar.gz but test case in this bug report is pretty solid.  Additionally this same code has been in quantal since early July.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/1029046/+subscriptions