It is good that Ubuntu's own archives have consistency measures to avoid
the problem. But they have never been the only source of Ubuntu
software, and since 11.04 they haven't even been the only source of
software available by default. We can apply the same checks to MyApps
and ARB packages, but as their velocity increases, we should also apply
defense in depth in case something slips through. Malicious packages can
always bork things, but it isn't necessary to present a user with a non-
understood choice in this alert box merely because an application
developer typed "Depends: glibfoo (=2.8)" when they meant "Depends:
glibfoo (>=2.8)".

For [3] above, I suggest that the design be roughly equivalent to the
"These applications conflict and must be removed" section I've sketched
for OS version upgrades. <https://wiki.ubuntu.com/ReleaseUpgrades#ready>

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/955022

Title:
  "Not all updates can be installed" requires a decision most people
  can't make

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/955022/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to