@juliank I think you missed the point of this bug report and its grave status for "unattended-upgrades".
This bug happens even when there is *no* "intermediate" update available in the Ubuntu repository (allowed-origin). When there is an *UPDATE AVAILABLE IN AN EXTERNAL REPOSITORY* (not-allowed-origin), "unattended-upgrades" installs the package from the Ubuntu repository, which hasn't even changed (!) Example: ubuntu: 1:1.0 now: 0:123.0 ppa: 0:123.0 (apt-pinned to 1000) Update available *IN THE EXTERNAL REPOSITORY*: ubuntu: 1:1.0 now: 0:123.0 ppa: 0:124.0 (apt-pinned to 1000) "unattended-upgrades" stupidly installs 1:1.0 (WTF?!): ubuntu: 1:1.0 now: 1:1.0 ppa: 0:124.0 (apt-pinned to 1000) And then a manual "apt-get upgrade" (properly) installs 0:124.0: ubuntu: 1:1.0 now: 0:124.0 ppa: 0:124.0 (apt-pinned to 1000) > but the "workaround" is the right solution for this issue. (workaround = pinning Ubuntu repository to 1/-1 for all external packages) Wrong. You may add the entire Debian repository (which will be not-allowed-origin), and now you have to pin every package (and dependency!) installed from Debian *by name* in order for "unattended-upgrades" not to mess with them. This "solution" would be ridiculous. > particularly odd case No odd case here: there was *no* update available in the Ubuntu repository in this case. It's "unattended-upgrades" behavior that is odd and completely broken. > it's very hard to implement This doesn't justify keeping a grave bug in "unattended-upgrades" behavior. And it shouldn't be that hard: 1. Get the list of packages+version+origin that can be updated no matter of the allowed-origin state, no messing with apt-pinning. 2. Upgrade only the packages from this list that have origins that are allowed. To sum up: "unattended-upgrades" completely breaks APT pinning (meant mostly for external repositories) and selects completely wrong versions for installation candidates. Period. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2033646 Title: unattended-upgrade ignores apt-pinning to not-allowed origins To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/2033646/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs