lp:ubuntu/natty-security/update-notifier

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

141. By Marc Deslauriers on 2011-11-24

* SECURITY UPDATE: hotfix for arbitrary code execution via directory
  traversal in update-manager on iso media (LP: #881548)
  - data/cddistupgrader: patch update-manager that is pulled off an
    upgrade cd.
  - debian/update-manager-downloader-fix2.diff: hotfix to verify
    signature before unpacking the tarball in
    UpdateManager/Core/DistUpgradeFetcherCore.py.
  - debian/update-notifier-common.*: ship new hotfix in package.
  - CVE-2011-3152

140. By Michael Vogt on 2011-03-31

[ Till Kamppeter ]
* src/uevent.c:
  - HP laser printers which require firmware can also have the
    product ID "xx2a" now. (LP: #734822)

139. By Michael Vogt on 2011-03-09

* data/apt-cdrom-check, data/cddistupgrader:
  - support upgrades from filesystems without the "stable" and
    "ubuntu" symlinks (like vfat)
* src/gdu.c:
  - check all removable devices for a upgrader
  - when detecting a upgrade CD skip the "Run package manager"
    step as its recommended to use the release upgrader

138. By Michael Vogt on 2011-02-16

* src/hooks.c:
  - use x-terminal-emulator instead of hardcoding gnome-terminal
    (LP: #365796)

137. By Kees Cook on 2011-02-13

data/update-motd-fsck-at-reboot: fix logic for getting mount list,
add defensive 0 sets, add "never check" special cases (LP: #718469).

136. By Lionel Le Folgoc on 2011-02-13

src/reboot.c: use consolekit instead of hal when gnome-session is
not available. lp: #716905

135. By Michael Vogt on 2011-01-25

merged lp:~brian-murray/update-notifier/error-message-string-fix,
many thanks!

134. By Michael Vogt on 2011-01-10

* debian/90-updates-available, debian/98-fsck-at-reboot,
  debian/98-reboot-required:
  - check if the scripts exist before using them (thanks to
    Kees Cook)

133. By Michael Vogt on 2011-01-04

* src/crash.c:
  - add dialog when system crashes are detected to avoid fullscreen
    gksu window
  - fix incorrect bits from the previous merge (thanks to Sebastien Bacher)
  - honor the /apps/update-notifier/auto_launch gconf key, if that is
    set never display a notifcation area icon but instead always fire
    up apport, if set, do the opposite and always show notifcation
    area icon and never fire up apport automatically

132. By Michael Vogt on 2011-01-04

[ Sebastien Bacher ]
* src/crash.c: if there is no systray report at least the user issues.
  The code should still be ported to use an indicator later on.
* src/crash.c: Don't spam the session log with the crash names either.
* src/crash.c, src/reboot.c, src/update-notifier.c:
  - clear some debug calls to keep the session log clean

[ Michael Vogt ]
* src/update-notifier.c:
  - move debug calls into g_debug and hide that by default
  - add new --debug-misc call that is a catch-all bucket for
    uncategorized messages
* src/crash.c:
  - use g_spawn_sync() instead of g_spawn_sync_command_line and
    pass G_SPAWN_STDOUT_TO_DEV_NULL|G_SPAWN_STDERR_TO_DEV_NULL