[Bug 1223321] Re: Software updater says there are 7 updates when there are only 2

[markling]

Righto, Seth. Thanks. Apologies for the alarm.

I see how the distinction between whether it *is* a secuirty
vulnerability or *might be* one may be important from your point of
view. The distinction in less marked for a user in no position to be
able to discern the difference, or indeed tell if one that *might be*
actually *is*.

Look at it like this: if a user came to you and said, my update notifier
says there are 14 updates and yet the Updater says there are 9 - can I
go ahead and use the updater without fear than an attacker might find an
avenue in this difference to slip in some malicious software? Would you
be in a position to say, 'Go ahead: everything's fine'?

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to update-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1223321

Title:
  Software updater says there are 7 updates when there are only 2

Status in “update-manager” package in Ubuntu:
  New

Bug description:
  I've marked it as a security vulnerability.

  ProblemType: Bug
  DistroRelease: Ubuntu 13.04
  Package: update-manager 1:0.186.2
  ProcVersionSignature: Ubuntu 3.8.0-30.44-generic 3.8.13.6
  Uname: Linux 3.8.0-30-generic x86_64
  ApportVersion: 2.9.2-0ubuntu8.3
  Architecture: amd64
  Date: Tue Sep 10 13:19:51 2013
  GsettingsChanges:
   b'com.ubuntu.update-manager' b'first-run' b'false'
   b'com.ubuntu.update-manager' b'launch-time' b'1378815536'
   b'com.ubuntu.update-manager' b'show-details' b'true'
   b'com.ubuntu.update-manager' b'window-height' b'1079'
   b'com.ubuntu.update-manager' b'window-width' b'680'
  InstallationDate: Installed on 2012-11-28 (285 days ago)
  InstallationMedia: Xubuntu 12.10 "Quantal Quetzal" - Release amd64 (20121017.1)
  MarkForUpload: True
  PackageArchitecture: all
  SourcePackage: update-manager
  UpgradeStatus: Upgraded to raring on 2013-05-14 (118 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/1223321/+subscriptions