Public bug reported:

Binary package hint: update-manager

Even if the only updates available are non-security updates, package-
manager makes it visually look like the updates are in fact security
updates.

In the attached screenshot, you can see where at the top of the
updatatable package list, there's a message "Important security
updates".  The first five packages are: cupsys, cupsys-bsd, cupsys-
client, cupsys-common, and ghostscript.

Here's the 'apt-cache policy' listings for those packages:

[EMAIL PROTECTED]:~$ apt-cache policy cupsys
cupsys:
  Installed: 1.3.2-1ubuntu7
  Candidate: 1.3.2-1ubuntu7.5
  Version table:
     1.3.2-1ubuntu7.5 0
        500 http://us.archive.ubuntu.com gutsy-updates/main Packages
     1.3.2-1ubuntu7.3 0
        500 http://security.ubuntu.com gutsy-security/main Packages
 *** 1.3.2-1ubuntu7 0
        500 http://us.archive.ubuntu.com gutsy/main Packages
        100 /var/lib/dpkg/status
[EMAIL PROTECTED]:~$ apt-cache policy cupsys-bsd
cupsys-bsd:
  Installed: 1.3.2-1ubuntu7
  Candidate: 1.3.2-1ubuntu7.5
  Version table:
     1.3.2-1ubuntu7.5 0
        500 http://us.archive.ubuntu.com gutsy-updates/main Packages
     1.3.2-1ubuntu7.3 0
        500 http://security.ubuntu.com gutsy-security/main Packages
 *** 1.3.2-1ubuntu7 0
        500 http://us.archive.ubuntu.com gutsy/main Packages
        100 /var/lib/dpkg/status
[EMAIL PROTECTED]:~$ apt-cache policy cupsys-client
cupsys-client:
  Installed: 1.3.2-1ubuntu7
  Candidate: 1.3.2-1ubuntu7.5
  Version table:
     1.3.2-1ubuntu7.5 0
        500 http://us.archive.ubuntu.com gutsy-updates/main Packages
     1.3.2-1ubuntu7.3 0
        500 http://security.ubuntu.com gutsy-security/main Packages
 *** 1.3.2-1ubuntu7 0
        500 http://us.archive.ubuntu.com gutsy/main Packages
        100 /var/lib/dpkg/status
[EMAIL PROTECTED]:~$ apt-cache policy cupsys-common
cupsys-common:
  Installed: 1.3.2-1ubuntu7
  Candidate: 1.3.2-1ubuntu7.5
  Version table:
     1.3.2-1ubuntu7.5 0
        500 http://us.archive.ubuntu.com gutsy-updates/main Packages
     1.3.2-1ubuntu7.3 0
        500 http://security.ubuntu.com gutsy-security/main Packages
 *** 1.3.2-1ubuntu7 0
        500 http://us.archive.ubuntu.com gutsy/main Packages
        100 /var/lib/dpkg/status
[EMAIL PROTECTED]:~$ apt-cache policy ghostscript
ghostscript:
  Installed: 8.61.dfsg.1~svn8187-0ubuntu3
  Candidate: 8.61.dfsg.1~svn8187-0ubuntu3.3
  Version table:
     8.61.dfsg.1~svn8187-0ubuntu3.3 0
        500 http://us.archive.ubuntu.com gutsy-updates/main Packages
     8.61.dfsg.1~svn8187-0ubuntu3.2 0
        500 http://security.ubuntu.com gutsy-security/main Packages
 *** 8.61.dfsg.1~svn8187-0ubuntu3 0
        500 http://us.archive.ubuntu.com gutsy/main Packages
        100 /var/lib/dpkg/status

You can see that none of these updates are coming from the security
archives.

I created this situation by doing a clean install of Gutsy, then going
to the "Software Sources" dialog and selecting to auto-install security
updates.  The next day, many updates were auto-installed, the updates
still list in update-manager are the ones that weren't updated.

Note that it's not that update-manager installs these non-security
updates when you've selected to auto-install security updates, update-
manager does not do this.  But from the GUI, it just looks like those
updates are security updates.

** Affects: update-manager (Ubuntu)
     Importance: Undecided
         Status: New

-- 
update-manager indicates that updates are security updates even if they're not
https://bugs.launchpad.net/bugs/209169
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to