Package: adept
Version: 2.1.2
Severity: grave
Justification: causes non-serious data loss
Tags: security
X-Debbugs-Cc: [EMAIL PROTECTED]

Here's the scenario.

apt-get upgrade shows you a bunch of packages which aren't upgradable
because its newer version got some more dependencies.
Example:
You had package a.1 installed on your system. The testing repository now
has a.2 which has an additional dependency b.1

Now when you manually say apt to install package a.2, it also downloads
the new dependency packages b.1.
If you have apt-listbugs installed, and you find that there's a bug filed
against b.1 which is fixed in b.2 which currently is in testing, a user
normally says 'N' and aborts the installation to wait till b.2 propagates
to testing.

All fine till here.

Doing the same thing in adept doesn't work.

Adept informs you that package a.1 has an upgrade available. It also shows
that b.1 needs be installed.
The user hits, "Fetch" button.
Adept downloads the package, runs apt-listbugs, then waits for the user
intervention for the bugs listed.
Again as a user you say 'N', but adept *ignores* the 'N' you passed and
proceeds ahead with installation of the vulnerable b.1 package

I hope I've made the bug report clear.

Thanks,
Ritesh


-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (990, 'testing'), (550, 'unstable'), (500, 'stable'), 
(350, 'experimental'), (150, 'edgy'), (150, 'dapper')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-xps
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages adept depends on:
ii  adept-installer               2.1.2      simple user interface for 
applicat
ii  adept-manager                 2.1.2      package manager for KDE
ii  adept-notifier                2.1.2      system tray notifier of available 
ii  adept-updater                 2.1.2      system update tool for KDE

adept recommends no packages.

-- no debconf information

-- 
Ritesh Raj Sarraf
RESEARCHUT - http://www.researchut.com
"Necessity is the mother of invention."
"Stealing logic from one person is plagiarism, stealing from many is 
research."
"The great are those who achieve the impossible, the petty are those who 
cannot - rrs"


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to