Support changelogs in update-manager
Bug #1294604 reported by
ITPROJECTS
This bug affects 8 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
elementary OS |
Confirmed
|
Wishlist
|
Unassigned |
Bug Description
It would be great for Elementary to provide changelogs. At the moment when one clicks on an update, there is no information as to what's new. A message come in the changes section "This update does not come from a source that supports changelogs."
This means that it isn't so easy to evaluate fixes directly from the updater, but only from browser for the individual bugs every time. This may cause some unintended security holes to develop, for example if the new bugfix upgrades one part, but deprecates another, without the user even being told of that, since changelogs aren't supported.
information type: | Private Security → Public Security |
information type: | Public Security → Public |
To post a comment you must log in.
I don't really understand the security part; the assumption here is that the user never has to install updates not marked as important security updates and never has to read changelogs to maintain a secure system. How can changelogs affect that and why should we force users to read them?