Righto, Seth. Thanks. Apologies for the alarm.

I see how the distinction between whether it *is* a secuirty
vulnerability or *might be* one may be important from your point of
view. The distinction in less marked for a user in no position to be
able to discern the difference, or indeed tell if one that *might be*
actually *is*.

Look at it like this: if a user came to you and said, my update notifier
says there are 14 updates and yet the Updater says there are 9 - can I
go ahead and use the updater without fear than an attacker might find an
avenue in this difference to slip in some malicious software? Would you
be in a position to say, 'Go ahead: everything's fine'?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1223321

Title:
  Software updater says there are 7 updates when there are only 2

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/1223321/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to