Bug 462037

Summary:

tryin to use apt-get to upgrade after security breach fails

Product:

[Fedora] Fedora

Reporter:

Eli Wapniarski <eli>

Component:

apt

Assignee:

Axel Thimm <axel.thimm>

Status:

CLOSED NEXTRELEASE

QA Contact:

Fedora Extras Quality Assurance <extras-qa>

Severity:

urgent

Docs Contact:

Priority:

medium

Version:

CC:

pmatilai

Target Milestone:

---

Target Release:

---

Hardware:

All

OS:

Linux

Whiteboard:

Fixed In Version:

Doc Type:

Bug Fix

Doc Text:

Story Points:

---

Clone Of:

Environment:

Last Closed:

2008-09-16 23:19:04 UTC

Type:

---

Regression:

---

Mount Type:

---

Documentation:

---

CRM:

Verified Versions:

Category:

---

oVirt Team:

---

RHEL 7.3 requirements from Atomic Host:

Cloudforms Team:

---

Target Upstream Version:

Embargoed:

Attachments:

Description	Flags
apt-get_update_output.txt	none
apt-get_fd_dist_upgrade_output.txt	none

Description Eli Wapniarski 2008-09-12 06:02:43 UTC

Hi

After the security breach, apt-get fails miserably. Every package that apt-get tries to download from

everything
updates
updates.newkey

fails with http 404 errors.

Yum seems to work OK.

Comment 1 Eli Wapniarski 2008-09-12 06:03:58 UTC

Oh... I forgot to mention... This happens with Fedora 9 and 8

Comment 2 Axel Thimm 2008-09-12 18:35:48 UTC

Even after apt-get update? Then please add some more of the error output, e.g. the 404 errors will be accompanied by the missing URLs.

Comment 3 Eli Wapniarski 2008-09-12 19:33:09 UTC

I've attached a couple of files that contain the output of "apt-get update" and "apt-get -fd dist-upgrade"

As you can see, the output from the update is fine. The output from dist-upgrade shows problems.

Comment 4 Eli Wapniarski 2008-09-12 19:34:03 UTC

Created attachment 316614 [details]
apt-get_update_output.txt

Comment 5 Eli Wapniarski 2008-09-12 19:34:43 UTC

Created attachment 316615 [details]
apt-get_fd_dist_upgrade_output.txt

Comment 6 Eli Wapniarski 2008-09-12 19:38:10 UTC

Oh.. one other thing.  The output is similar for Fedora 9 x86_64, Fedora 9 i386 and Fedora 8 i386.

Comment 7 Axel Thimm 2008-09-13 15:36:00 UTC

Where did the newkey config came from? I'm just adding it to the repo.

Comment 8 Eli Wapniarski 2008-09-13 16:59:56 UTC

I followed the instructions provided at

https://fedoraproject.org/wiki/Enabling_new_signing_key

Then used the examples provided from the new fedora.repo etc to reconfigure the fedora.list etc files to conform to the new locations

ie

This was added to fedora-updates.list

repomd http://download.fedoraproject.org/pub/ fedora/linux/updates/9/x86_64.newkey/

All the above on one line (of course). The reason I have the space between pub and fedora is so that I can create a unique identifier in the preferences file

ie.

Package: *
Pin: release c=fedora-linux-updates-9-x86_64.newkey
Pin-Priority: 1003

This change of locations needs to be  made for updates in fedora-updates.list and and fedora.list

Comment 9 Fedora Update System 2008-09-16 23:19:02 UTC

fedora-package-config-apt-9-3.transitional, fedora-package-config-smart-9-13.0.2.transitional has been pushed to the Fedora 9 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 10 Fedora Update System 2008-09-16 23:23:46 UTC

fedora-package-config-apt-8-2.transitional, fedora-package-config-smart-8-12.0.2.transitional has been pushed to the Fedora 8 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 11 Eli Wapniarski 2008-09-19 08:08:13 UTC

Seems to be fixed. Files are now being downloaded.