Unattended-upgrades in not affected by this bug because it downloads only packages it would install and the configuration files it ships are set to only do that.
It looks like software properties changes the files to include those keys. https://sources.debian.org/src/software-properties/0.96.20.2-2/softwareproperties/SoftwareProperties.py/?hl=605#L605 ** Also affects: software-properties (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apt in Ubuntu. https://bugs.launchpad.net/bugs/1825812 Title: Daily apt update timer downloads all dist-upgradable packages Status in apt package in Ubuntu: New Status in software-properties package in Ubuntu: New Status in unattended-upgrades package in Ubuntu: Invalid Status in update-notifier package in Ubuntu: New Bug description: [Impact] apt-daily.service accidentally runs apt-get -d dist-upgrade after the first time it runs unattended-upgrades -d due to the latter reusing the stamp of the former. This means that machines download all packages that can be dist- upgraded rather than just the security updates unattended-upgrades will install; which means they might be wasting bandwidth. [Test case] TODO [Regression potential] TODO To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1825812/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
