Software Updater won't display updates

Bug #1217843 reported by Alexander T. Stanton
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
update-manager (Ubuntu)
New
Undecided
Unassigned

Bug Description

This is the second time that its happened, where the update-manager does not display what updates its installing, but will display that is is about to download x amount of kilobytes. I want to know what I am putting on my computer. Please look into this because this could be a way to deliver malware onto ones computer without anyone knowing. I am marking this as a security vulnerability.

ProblemType: Bug
DistroRelease: Ubuntu 13.04
Package: update-manager 1:0.186.1
ProcVersionSignature: Ubuntu 3.8.0-29.42-generic 3.8.13.5
Uname: Linux 3.8.0-29-generic x86_64
ApportVersion: 2.9.2-0ubuntu8.3
Aptdaemon:

Architecture: amd64
Date: Wed Aug 28 07:14:33 2013
ExecutablePath: /usr/bin/update-manager
GsettingsChanges:
 b'com.ubuntu.update-manager' b'first-run' b'false'
 b'com.ubuntu.update-manager' b'launch-time' b'1377688140'
 b'com.ubuntu.update-manager' b'show-details' b'true'
 b'com.ubuntu.update-manager' b'window-height' b'523'
 b'com.ubuntu.update-manager' b'window-width' b'484'
InstallationDate: Installed on 2013-05-04 (115 days ago)
InstallationMedia: Ubuntu 13.04 "Raring Ringtail" - Release amd64 (20130424)
InterpreterPath: /usr/bin/python3.3
MarkForUpload: True
PackageArchitecture: all
SourcePackage: update-manager
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Alexander T. Stanton (stanton-sculpture) wrote :
Revision history for this message
Seth Arnold (seth-arnold) wrote : Bug is not a security issue

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.

information type: Private Security → Public
Revision history for this message
Seth Arnold (seth-arnold) wrote :

My recollection of the update manager is that you must click the little expando-triangle to see details of what will be downloaded and updated.

So long as your apt sources are properly configured, all packages downloaded and installed are signed for authenticity. The keys that are used for validating the packages can be found via "apt-key list". This is what makes it safe to download packages from mirror sites not operated by Ubuntu. (Though mirrors that do not update frequently may pose other problems, malware, viruses, and man-in-the-middle attackers corrupting packages in transit should not be among them.)

Revision history for this message
Alexander T. Stanton (stanton-sculpture) wrote : Re: [Bug 1217843] Re: Software Updater won't display updates

All very informative guys, thanks. But even using the expando triangle
thingy it doesn't show anything. I could only see what it was downloading
while it was installing. The thing I like about update manager is that it
tells you exactly what it is about to do. I even like watching the terminal
while it's updating. It helps me learn more about what is going on in my
computer. So when it doesn't tell me what's going on,it's alarming and
disappointing. I don't know how it happened or when I will be able to
repeat it.

Thanks all

Alex
On Aug 28, 2013 1:55 PM, "Seth Arnold" <email address hidden> wrote:

> My recollection of the update manager is that you must click the little
> expando-triangle to see details of what will be downloaded and updated.
>
> So long as your apt sources are properly configured, all packages
> downloaded and installed are signed for authenticity. The keys that are
> used for validating the packages can be found via "apt-key list". This
> is what makes it safe to download packages from mirror sites not
> operated by Ubuntu. (Though mirrors that do not update frequently may
> pose other problems, malware, viruses, and man-in-the-middle attackers
> corrupting packages in transit should not be among them.)
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1217843
>
> Title:
> Software Updater won't display updates
>
> Status in “update-manager” package in Ubuntu:
> New
>
> Bug description:
> This is the second time that its happened, where the update-manager
> does not display what updates its installing, but will display that is
> is about to download x amount of kilobytes. I want to know what I am
> putting on my computer. Please look into this because this could be a
> way to deliver malware onto ones computer without anyone knowing. I
> am marking this as a security vulnerability.
>
> ProblemType: Bug
> DistroRelease: Ubuntu 13.04
> Package: update-manager 1:0.186.1
> ProcVersionSignature: Ubuntu 3.8.0-29.42-generic 3.8.13.5
> Uname: Linux 3.8.0-29-generic x86_64
> ApportVersion: 2.9.2-0ubuntu8.3
> Aptdaemon:
>
> Architecture: amd64
> Date: Wed Aug 28 07:14:33 2013
> ExecutablePath: /usr/bin/update-manager
> GsettingsChanges:
> b'com.ubuntu.update-manager' b'first-run' b'false'
> b'com.ubuntu.update-manager' b'launch-time' b'1377688140'
> b'com.ubuntu.update-manager' b'show-details' b'true'
> b'com.ubuntu.update-manager' b'window-height' b'523'
> b'com.ubuntu.update-manager' b'window-width' b'484'
> InstallationDate: Installed on 2013-05-04 (115 days ago)
> InstallationMedia: Ubuntu 13.04 "Raring Ringtail" - Release amd64
> (20130424)
> InterpreterPath: /usr/bin/python3.3
> MarkForUpload: True
> PackageArchitecture: all
> SourcePackage: update-manager
> UpgradeStatus: No upgrade log present (probably fresh install)
>
> To manage notifications about this bug go to:
>
> https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/1217843/+subscriptions
>

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.