projects are offering .deb files on their +downloads page

Bug #820170 reported by Andrew Mitchell
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Triaged
Low
Unassigned

Bug Description

The +adddownloadfile page for adding a file to a release has 'Installer File' as an option, which leads people to upload binary .deb packages. These packages are not filtered & can be added to a release.

Revision history for this message
Aaron Bentley (abentley) wrote :

While uploading a deb file may not always be the right thing to do, is it always the wrong thing to do? I imagine "Installer file" was meant to refer to installlers such as the .exe and .msi installers found on Windows, so its existence as an option does seem legitimate.

Changed in launchpad:
status: New → Incomplete
Revision history for this message
Robert Collins (lifeless) wrote :

Deb files specifically are a problem - Ubuntu wants to *discourage* folk running arbitrary debs with unknown provenance; the software centre is the preferred medium for getting hold of new debs.

Changed in launchpad:
status: Incomplete → Triaged
importance: Undecided → Low
summary: - +adddownloadfile page has 'Installer File', leading people to upload
- binary packages
+ projects are offering .deb files on their +downloads page
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.