[solved] serious bug in dpkg

Started by musca, 2014/10/21, 23:43:04

Previous topic - Next topic

musca

Hello,

beware of this serious bug http://bugs.debian.org/766242
and better do not upgrade to dpkg 1.17.19 at the moment.

Hold your dpkg version with this command:
apt-mark hold dpkg

greetings
musca
,,Es irrt der Mensch, solang er strebt."  (Goethe, Faust)

musca

Hello,

a fix is on the way. The maintainer will do some testing and extend the test suite to catch such issues in the future.

We are lucky in this case, because dpkg is still able to downgrade itself.
root@sidbox:~# dpkg -i /var/cache/apt/archives/dpkg_1.17.18_amd64.deb
dpkg: warning: downgrading dpkg from 1.17.19 to 1.17.18
(Reading database ... 167715 files and directories currently installed.)
Preparing to unpack .../dpkg_1.17.18_amd64.deb ...
Unpacking dpkg (1.17.18) over (1.17.19) ...
Setting up dpkg (1.17.18) ...
Processing triggers for siduction-dynamic-dms (2014.08.13) ...
Processing triggers for man-db (2.7.0.2-2) ...

Don't forget to "apt-mark hold dpkg"  before you take the next steps and proceed with the usual dist-upgrade.

greetings
musca
,,Es irrt der Mensch, solang er strebt."  (Goethe, Faust)

hendrikL

#2
If you cleaned the cache with "apt-get clean", do following
wget -c http://ftp.de.debian.org/debian/pool/main/d/dpkg/dpkg_1.17.18_amd64.deb && dpkg -i dpkg_1.17.18_amd64.deb && apt-mark hold dpkg


EDIT: Does not work, because it is not at that location anymore, look some post later.

clubex

I missed the above post also unfortunately I did an apt-get clean.
hendrikL: I tried your code with the following result

wget -c http://ftp.de.debian.org/debian/pool/main/d/dpkg/dpkg_1.17.18_amd64.deb && dpkg -i dpkg_1.17.18_amd64.deb && apt-mark hold dpkg
--2014-10-22 12:16:12--  http://ftp.de.debian.org/debian/pool/main/d/dpkg/dpkg_1.17.18_amd64.deb
Resolving ftp.de.debian.org (ftp.de.debian.org)... 141.76.2.4
Connecting to ftp.de.debian.org (ftp.de.debian.org)|141.76.2.4|:80... connected.
HTTP request sent, awaiting response... 404 Not Found
2014-10-22 12:16:12 ERROR 404: Not Found.


No obvious typos so I'm stuck with dpkg_1.17.18_amd64.

Any suggestions?


hendrikL

#5
Unfortunately it is removed, not really nice.
But ok, as convbsd wrote, take it from debian snapshots.

for x64
wget -c http://snapshot.debian.org/archive/debian/20141021T164213Z/pool/main/d/dpkg/dpkg_1.17.18_amd64.deb. && dpkg -i dpkg_1.17.18_amd64.deb && apt-mark hold dpkg

for i386
wget -c http://snapshot.debian.org/archive/debian/20141021T164213Z/pool/main/d/dpkg/dpkg_1.17.18_i386.deb. && dpkg -i dpkg_1.17.18_i386.deb && apt-mark hold dpkg

clubex

Many thanks hendrikL and convbsd that did it.

hefee

Quote from: hendrikL on 2014/10/22, 14:01:10
Unfortunately it is removed, not really nice.
But ok, as convbsd wrote, take it from debian snapshots.
Well all mirrors are synced and only the newest version is availabe from them. If you want an older version you always have to use snapshots. It worked for you because to took an mirror, that wasn't sync at that time you tried it.

hendrikL

@hefee
Thank you for clarification, i forgot about that  8)

There is a fixed version of dpkg uploaded.


LANG=C apt-cache policy dpkg
dpkg:
  Installed: 1.17.18
  Candidate: 1.17.20
  Version table:
     1.17.20 0
        500 http://ftp.nl.debian.org/debian/ sid/main amd64 Packages
        500 http://debian.morphium.info/debian/ unstable/main amd64 Packages


So if you marked dpkg  to hold, please do following before the next dist-upgrade

apt-mark unhold dpkg

To see what is marked hold, you can use
apt-mark showhold

I think we can close this issue and mark it as solved.

musca

Hello hendrikL,

yes, i can confirm your successful testing, thanks!  I marked the thread as [solved].

greetings
musca
,,Es irrt der Mensch, solang er strebt."  (Goethe, Faust)