[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-03-30 Thread Launchpad Bug Tracker
This bug was fixed in the package landscape-client - 18.01-0ubuntu3.6

---
landscape-client (18.01-0ubuntu3.6) bionic; urgency=medium

  * d/p/1903776-release-upgrade.patch (LP: #1903776)
- Use /etc/apt/trusted.gpg.d for validating upgrade-tool signature.

 -- Simon Poirier   Tue, 17 Nov 2020
19:06:42 -0500

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-03-30 Thread Launchpad Bug Tracker
This bug was fixed in the package landscape-client - 19.12-0ubuntu4.3

---
landscape-client (19.12-0ubuntu4.3) focal; urgency=medium

  * d/p/0004-lp1903776-release-upgrade.patch (LP: #1903776)
- Use /etc/apt/trusted.gpg.d for validating upgrade-tool signature.

 -- Simon Poirier   Mon, 14 Feb 2022
18:56:31 -0500

** Changed in: landscape-client (Ubuntu Focal)
   Status: Fix Committed => Fix Released

** Changed in: landscape-client (Ubuntu Bionic)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-03-30 Thread Launchpad Bug Tracker
This bug was fixed in the package landscape-client - 19.12-0ubuntu10.1

---
landscape-client (19.12-0ubuntu10.1) impish; urgency=medium

  * d/p/0006-lp1903776-release-upgrade.patch (LP: #1903776)
- Use /etc/apt/trusted.gpg.d for validating upgrade-tool signature.

 -- Simon Poirier   Thu, 10 Feb 2022
18:46:26 -0500

** Changed in: landscape-client (Ubuntu Impish)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-03-29 Thread Simon Poirier
I also verified landscape-client 19.12-0ubuntu10.1 from impish-proposed.
I used the same landscape-server-quickstart from ppa:landscape/19.10 as 
previously, with the same database query to enable upgrading.

Again, upgrade tool downloaded and validated successfully on the proposed 
version, with the upgrade successful and the
logs confirming the success:

# tail -f /var/log/landscape/release-upgrader.log 
2022-03-29 19:58:48,927 DEBUG[MainThread] Started firing run.
2022-03-29 19:58:48,927 DEBUG[MainThread] Finished firing run.
2022-03-29 19:58:49,793 INFO [MainThread] Successfully fetched upgrade-tool 
files
2022-03-29 19:58:49,817 INFO [MainThread] Successfully verified 
upgrade-tool tarball
2022-03-29 20:09:34,616 INFO [MainThread] Queuing message with release 
upgrade results to exchange urgently.
2022-03-29 20:09:35,028 DEBUG[MainThread] Started firing stop.
2022-03-29 20:09:35,028 DEBUG[MainThread] Finished firing stop.  

** Tags removed: verification-needed verification-needed-focal 
verification-needed-impish
** Tags added: verification-done verification-done-focal 
verification-done-impish

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-03-29 Thread Simon Poirier
I verified landscape-client 19.12-0ubuntu4.3 from focal-proposed.
I used landscape-server-quickstart from ppa:landscape/19.10 and registered the 
proposed client against it.
Then I had to enable the upcoming upgrade tool to the server:

# sudo -u landscape psql landscape-standalone-main -c "insert into meta_release 
(code_name, name, version, date, supported, upgrade_tool_tarball_url, 
upgrade_tool_signature_url, lts) VALUES ('jammy', 'Jammy Jellyfish', '22.04 
LTS', now(), 't', 
'http://archive.ubuntu.com/ubuntu/dists/jammy/main/dist-upgrader-all/current/jammy.tar.gz',
 
'http://archive.ubuntu.com/ubuntu/dists/jammy/main/dist-upgrader-all/current/jammy.tar.gz.gpg',
 't')"
# sudo -u landscape psql landscape-standalone-main -c "update meta_release set 
upgrade_id=(select id from meta_release where code_name='jammy') where 
code_name in ('focal', 'impish')"

Launching the release upgrade activity from the web UI, the client
machine was able to download and validate the upgrade tool and upgraded
to jammy succesfully.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-03-28 Thread Simon Poirier
Verified landscape-client 18.01-0ubuntu3.6 on bionic by updating to the
bionic-proposed package.

I registered a new LXD container client on a SaaS account, triggered a
release upgrade. The upgrade tool downloaded, validated, launched and
the landscape activity completed successfully.

** Tags removed: verification-needed-bionic
** Tags added: verification-done-bionic

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-03-22 Thread Brian Murray
I personally curious about this statement from the bug description given
that it is possible with do-release-upgrade to perform upgrades to just
about any release you want.

" * There is no way to directly verify this issue on 20.10 Groovy and later
   (without faking a release) due to the lack of upgrade path to a supported
   LTS."

How exactly does landscape-client go about determining if a release
upgrade is available?

** Changed in: landscape-client (Ubuntu Impish)
   Status: In Progress => Fix Committed

** Tags added: verification-needed verification-needed-impish

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-03-11 Thread Launchpad Bug Tracker
This bug was fixed in the package landscape-client - 19.12-0ubuntu12

---
landscape-client (19.12-0ubuntu12) jammy; urgency=medium

  * d/p/lp1903776-release-upgrade.patch (LP: #1903776)
- Use /etc/apt/trusted.gpg.d for validating upgrade-tool signature.

 -- Simon Poirier   Wed, 09 Mar 2022
11:02:22 -0500

** Changed in: landscape-client (Ubuntu Jammy)
   Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-03-11 Thread Andreas Hasenack
All the others were uploaded.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-03-11 Thread Andreas Hasenack
Hirsute is EOL since January 2022, closing that task.

** Changed in: landscape-client (Ubuntu Hirsute)
   Status: In Progress => Won't Fix

** Changed in: landscape-client (Ubuntu Impish)
   Status: New => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-02-23 Thread Simon Poirier
** Changed in: landscape-client (Ubuntu Bionic)
 Assignee: Simon Poirier (simpoir) => (unassigned)

** Changed in: landscape-client (Ubuntu Focal)
 Assignee: Simon Poirier (simpoir) => (unassigned)

** Changed in: landscape-client (Ubuntu Groovy)
 Assignee: Simon Poirier (simpoir) => (unassigned)

** Changed in: landscape-client (Ubuntu Hirsute)
 Assignee: Simon Poirier (simpoir) => (unassigned)

** Changed in: landscape-client (Ubuntu Jammy)
 Assignee: Simon Poirier (simpoir) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-02-19 Thread Mathew Hodson
** Tags added: dist-upgrade

** Changed in: landscape-client (Ubuntu Bionic)
   Importance: Undecided => Medium

** Changed in: landscape-client (Ubuntu Focal)
   Importance: Undecided => Medium

** Changed in: landscape-client (Ubuntu Groovy)
   Importance: Undecided => Medium

** Changed in: landscape-client (Ubuntu Hirsute)
   Importance: Undecided => Medium

** Changed in: landscape-client (Ubuntu Impish)
   Importance: Undecided => Medium

** Changed in: landscape-client (Ubuntu Jammy)
   Importance: Undecided => Medium

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-02-15 Thread Launchpad Bug Tracker
** Merge proposal linked:
   
https://code.launchpad.net/~simpoir/ubuntu/+source/landscape-client/+git/landscape-client/+merge/415626

** Merge proposal linked:
   
https://code.launchpad.net/~simpoir/ubuntu/+source/landscape-client/+git/landscape-client/+merge/415627

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-02-14 Thread Launchpad Bug Tracker
** Merge proposal linked:
   
https://code.launchpad.net/~simpoir/ubuntu/+source/landscape-client/+git/landscape-client/+merge/415568

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-02-14 Thread Simon Poirier
** Also affects: landscape-client (Ubuntu Impish)
   Importance: Undecided
   Status: New

** Also affects: landscape-client (Ubuntu Jammy)
   Importance: Undecided
 Assignee: Simon Poirier (simpoir)
   Status: In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2022-02-14 Thread Launchpad Bug Tracker
** Merge proposal linked:
   
https://code.launchpad.net/~simpoir/ubuntu/+source/landscape-client/+git/landscape-client/+merge/415567

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2021-07-28 Thread Brian Murray
The Groovy Gorilla has reached end of life, so this bug will not be
fixed for that release

** Changed in: landscape-client (Ubuntu Groovy)
   Status: In Progress => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2021-02-08 Thread Albourne Software
Hi , Do you have any updates ?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2021-01-19 Thread John Lewis
Customer has asked again for a further update.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2020-12-07 Thread John Lewis
The customer is asking if there's an update?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2020-11-19 Thread Launchpad Bug Tracker
** Merge proposal linked:
   
https://code.launchpad.net/~simpoir/ubuntu/+source/landscape-client/+git/landscape-client/+merge/394185

** Merge proposal linked:
   
https://code.launchpad.net/~simpoir/ubuntu/+source/landscape-client/+git/landscape-client/+merge/394186

** Merge proposal linked:
   
https://code.launchpad.net/~simpoir/ubuntu/+source/landscape-client/+git/landscape-client/+merge/394187

** Merge proposal linked:
   
https://code.launchpad.net/~simpoir/ubuntu/+source/landscape-client/+git/landscape-client/+merge/394188

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2020-11-16 Thread Simon Poirier
** Changed in: landscape-client (Ubuntu Hirsute)
 Assignee: (unassigned) => Simon Poirier (simpoir)

** Changed in: landscape-client (Ubuntu Groovy)
 Assignee: (unassigned) => Simon Poirier (simpoir)

** Changed in: landscape-client (Ubuntu Focal)
 Assignee: (unassigned) => Simon Poirier (simpoir)

** Changed in: landscape-client (Ubuntu Bionic)
 Assignee: (unassigned) => Simon Poirier (simpoir)

** Changed in: landscape-client (Ubuntu Hirsute)
   Status: New => In Progress

** Changed in: landscape-client (Ubuntu Groovy)
   Status: New => In Progress

** Changed in: landscape-client (Ubuntu Focal)
   Status: New => In Progress

** Changed in: landscape-client (Ubuntu Bionic)
   Status: New => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2020-11-13 Thread Simon Poirier
** Description changed:

+ [Impact]
+ 
+  * When launching an Ubuntu release-upgrade through landscape-client, the
+upgrade-tool fails GPG verification due to trusted apt key having changed
+location as of 18.04 LTS.
+ 
+  * The proposed patch extends gpg lookup path to include all
+/etc/apt/trusted.gpg.d/*.gpg files in addition to /etc/apt/trusted.gpg
+when verifying the upgrade-tool signature.
+ 
+ [Test Case]
+ 
+  * Install and register the landscape-client against a landscape-server
+on a series supporting an upgrade.
+ 
+  * Wait for it to sync up packages.
+ 
+  * On the computer packages page, there is a link at the bottom to request a
+release upgrade of that machine, if a supported version is available.
+ 
+  * The upgrade fails and /var/log/landscape/release-upgrader.log will indicate
+a failed gpg verification.
+ 
+ [Where problems could occur]
+ 
+  * One thing which has been considered in this fix is how someone could have
+worked around the issue by re-creating the old key path. The fix covers
+such a case by still reading the deprecated trusted.gpg file.
+ 
+  * Although some care has been taken to only load valid gpg keys from apt
+trusted keychain, there could be unforeseen scenarios where invalid data
+gets read from the keychain. In such a case, the strict nature of gpg would
+reject the signature verification, thus being no worse than without the 
fix.
+ 
+  * The affected callsite is used for verifying the release-upgrader code prior
+to running it. One bad thing which we could imagine with this code path is
+falsely accepting an invalid file signature, which may create a security
+issue. This would likely take shape of injecting a gpg key, without
+having root access, in the search path.
+ 
+ [Other Info]
+ 
+  * There is no way to directly verify this issue on 20.10 Groovy and later
+(without faking a release) due to the lack of upgrade path to a supported
+LTS. The ubuntu-keyring package having the same file layout, the same
+validation failure is however to be expected if left unpatched.
+ 
+ [Original description]
+ 
  Since bionic, ubuntu-keyring removed `/etc/apt/trusted.gpg` in favor of
  `/etc/apt/trusted.gpg.d/`
  
  This breaks signature verification for the upgrade-tool.
  Trying to release-upgrade through landscape yields a failure on signature 
check:
  
  2020-11-10 15:47:51,019 WARNING  [MainThread] Invalid signature for 
upgrade-tool tarball: /usr/bin/gpg failed (out='', err='gpg: keybox 
'/etc/apt/trusted.gpg' created
  gpg: Signature made Fri Oct 16 03:28:09 2020 UTC
  gpg:using RSA key 3B4FE6ACC0B21F32
  gpg: Can't check signature: No public key

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1903776] Re: Changed ubuntu-keyring paths breaks upgrade to focal.

2020-11-13 Thread Simon Poirier
** Also affects: landscape-client (Ubuntu)
   Importance: Undecided
   Status: New

** Changed in: landscape-client (Ubuntu)
   Status: New => Confirmed

** Also affects: landscape-client (Ubuntu Groovy)
   Importance: Undecided
   Status: New

** Also affects: landscape-client (Ubuntu Bionic)
   Importance: Undecided
   Status: New

** Also affects: landscape-client (Ubuntu Hirsute)
   Importance: Undecided
   Status: Confirmed

** Also affects: landscape-client (Ubuntu Focal)
   Importance: Undecided
   Status: New

** Changed in: landscape-client (Ubuntu Hirsute)
   Status: Confirmed => New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903776

Title:
  Changed ubuntu-keyring paths breaks upgrade to focal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/landscape-client/+bug/1903776/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs