[Bug 1995247] Re: Leftover /tmp/apt-key.* files after updates with embedded gpg keys in deb822 sources

Launchpad Bug Tracker 1995247 at bugs.launchpad.net
Sat Dec 10 14:52:37 UTC 2022


This bug was fixed in the package apt - 2.5.4

---------------
apt (2.5.4) unstable; urgency=medium

  [ David Kalnischkies ]
  * Report failures back from debSystem::AddStatusFiles
  * Avoid dealing with a fake dpkg stanza in the tests
  * Allow apt to run if no dpkg/status file exists

  [ Johannes Schauer Marin Rodrigues ]
  * since base-passwd 3.6.1 the _apt user is in the default /etc/passwd

  [ Boyuan Yang ]
  * po/zh_CN.po: Update translation for apt/2.5.3

  [ quazgar ]
  * Documentation for autopurge command

  [ Julian Andres Klode ]
  * Actually delete temporary apt-key.*.asc helper files (LP: #1995247)

 -- Julian Andres Klode <jak at debian.org>  Mon, 31 Oct 2022 12:11:04
+0100

** Changed in: apt (Ubuntu Lunar)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1995247

Title:
  Leftover /tmp/apt-key.* files after updates with embedded gpg keys in
  deb822 sources

Status in apt package in Ubuntu:
  Fix Released
Status in apt source package in Jammy:
  In Progress
Status in apt source package in Kinetic:
  Fix Committed
Status in apt source package in Lunar:
  Fix Released

Bug description:
  [Impact]
  When keys are embedded into deb822 sources files as Signed-By, apt writes them to a temporary file, but the code to delete them accidentally had an if (0) in front of the deletion, so they don't get deleted and accumulate with each `apt update` run.

  [Test plan]
  Including a test case for this in our comprehensive integration test suite which runs as autopkgtest, so passing autopkgtest = good.

  [Where problems could occur]
  Files could end up being removed too soon if the code is otherwise wrong?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1995247/+subscriptions




More information about the foundations-bugs mailing list