[Aptitude-devel] Bug#934541: aptitude: upgraded a package to experimental without notice, though SolutionCost has "safety" first

[Vincent Lefevre]

Package: aptitude
Version: 0.8.11-7
Severity: important

In /etc/apt/apt.conf.d/10aptitude I have

Aptitude::ProblemResolver::SolutionCost "safety, removals";

but in an upgrade on 2019-07-08, aptitude upgraded a package to
experimental while I did not ask it explicitly and without any
warning. In the logs of the upgrade:

[UPGRADE] gdal-data:amd64 2.4.0+dfsg-1 -> 3.0.1+dfsg-1~exp1

That was perhaps to satisfy a dependency for the upgrade

[UPGRADE] libgdal20:amd64 2.4.0+dfsg-1+b1 -> 2.4.2+dfsg-1

in case gdal-data:amd64 2.4.2+dfsg-1 was not yet in the archives
(though libgdal20:amd64 2.4.2+dfsg-1 was already there).

But I would have never upgraded if I knew that there was an
experimental package there (I occasionally upgrade packages
to experimental, but only for a specific reason).

-- Package-specific info:
Terminal: xterm-256color
$DISPLAY is set.
which aptitude: /usr/bin/aptitude

aptitude version information:
aptitude 0.8.11
Compiler: g++ 8.2.0
Compiled against:
  apt version 5.0.2
  NCurses version 6.1
  libsigc++ version: 2.10.1
  Gtk+ support disabled.
  Qt support disabled.

Current library versions:
  NCurses version: ncurses 6.1.20190803
  cwidget version: 0.5.17
  Apt version: 5.0.2

aptitude linkage:
	linux-vdso.so.1 (0x00007ffdcaf8d000)
	libgtk3-nocsd.so.0 => /usr/lib/x86_64-linux-gnu/libgtk3-nocsd.so.0 (0x00007f5982e1c000)
	libapt-pkg.so.5.0 => /usr/lib/x86_64-linux-gnu/libapt-pkg.so.5.0 (0x00007f5982c46000)
	libncursesw.so.6 => /lib/x86_64-linux-gnu/libncursesw.so.6 (0x00007f5982c0b000)
	libtinfo.so.6 => /lib/x86_64-linux-gnu/libtinfo.so.6 (0x00007f5982bdb000)
	libsigc-2.0.so.0 => /usr/lib/x86_64-linux-gnu/libsigc-2.0.so.0 (0x00007f5982bd2000)
	libcwidget.so.3 => /usr/lib/x86_64-linux-gnu/libcwidget.so.3 (0x00007f5982acc000)
	libsqlite3.so.0 => /usr/lib/x86_64-linux-gnu/libsqlite3.so.0 (0x00007f59829a6000)
	libboost_iostreams.so.1.67.0 => /usr/lib/x86_64-linux-gnu/libboost_iostreams.so.1.67.0 (0x00007f5982988000)
	libboost_system.so.1.67.0 => /usr/lib/x86_64-linux-gnu/libboost_system.so.1.67.0 (0x00007f5982981000)
	libxapian.so.30 => /usr/lib/x86_64-linux-gnu/libxapian.so.30 (0x00007f5982755000)
	libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f5982734000)
	libstdc++.so.6 => /usr/lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007f598255c000)
	libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f59823d7000)
	libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007f59823bd000)
	libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f59821fc000)
	libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f59821f7000)
	libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2 (0x00007f59821dd000)
	libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f59821c0000)
	libbz2.so.1.0 => /lib/x86_64-linux-gnu/libbz2.so.1.0 (0x00007f59821ab000)
	liblzma.so.5 => /lib/x86_64-linux-gnu/liblzma.so.5 (0x00007f5982183000)
	liblz4.so.1 => /usr/lib/x86_64-linux-gnu/liblz4.so.1 (0x00007f5982164000)
	libzstd.so.1 => /usr/lib/x86_64-linux-gnu/libzstd.so.1 (0x00007f59820c4000)
	libudev.so.1 => /lib/x86_64-linux-gnu/libudev.so.1 (0x00007f598209e000)
	libsystemd.so.0 => /lib/x86_64-linux-gnu/libsystemd.so.0 (0x00007f5981ffd000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f598347f000)
	librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007f5981ff1000)
	libuuid.so.1 => /lib/x86_64-linux-gnu/libuuid.so.1 (0x00007f5981fe8000)
	libgcrypt.so.20 => /lib/x86_64-linux-gnu/libgcrypt.so.20 (0x00007f5981eca000)
	libgpg-error.so.0 => /lib/x86_64-linux-gnu/libgpg-error.so.0 (0x00007f5981ea7000)

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=POSIX, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=POSIX (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages aptitude depends on:
ii  aptitude-common           0.8.11-7
ii  libapt-pkg5.0             1.8.3
ii  libboost-iostreams1.67.0  1.67.0-13
ii  libboost-system1.67.0     1.67.0-13
ii  libc6                     2.28-10
ii  libcwidget3v5             0.5.17-11
ii  libgcc1                   1:9.1.0-10
ii  libncursesw6              6.1+20190803-1
ii  libsigc++-2.0-0v5         2.10.1-2
ii  libsqlite3-0              3.29.0-1
ii  libstdc++6                9.1.0-10
ii  libtinfo6                 6.1+20190803-1
ii  libxapian30               1.4.11-1

Versions of packages aptitude recommends:
ii  libparse-debianchangelog-perl  1.2.0-13
ii  sensible-utils                 0.0.12

Versions of packages aptitude suggests:
ii  apt-xapian-index                0.50
ii  aptitude-doc-en [aptitude-doc]  0.8.11-7
pn  debtags                         <none>
ii  tasksel                         3.54

-- no debconf information