Trusty will not install downloaded drivers with control files with incorrect owners
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| software-center (Ubuntu) |
New
|
Undecided
|
Unassigned | ||
Bug Description
Trusty will not install downloaded drivers with bad MD5 sums even when told to do so. The Google Chrome package similarly will not install. This bug is the opposite of a security vulnerability; it is security overkill that turns the system into a boat anchor.
Earlier verions of Trusty and all earlier Ubuntu releases would honor a user's request to the software center request to "ignore and install". Clicking this button produces the message "The installation or removal of a software package failed."
This bug applies to the 14.04 daily build for 4/08 and a few earlier builds also.
ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: software-center 13.10-0ubuntu3
ProcVersionSign
Uname: Linux 3.13.0-23-generic x86_64
ApportVersion: 2.14.1-0ubuntu1
Architecture: amd64
CurrentDesktop: Unity
Date: Tue Apr 8 15:49:13 2014
ExecutablePath: /usr/share/
InstallationDate: Installed on 2014-04-08 (0 days ago)
InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Daily amd64 (20140408)
InterpreterPath: /usr/bin/python2.7
PackageArchitec
ProcEnviron:
LANGUAGE=en_US
PATH=(custom, no user)
XDG_RUNTIME_
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: software-center
UpgradeStatus: No upgrade log present (probably fresh install)
| cedial (cedial) wrote | #1 |
| Seth Arnold (seth-arnold) wrote Bug is not a security issue | #2 |
| information type: | Private Security → Public |
| summary: |
- Trusty will not install downloaded drivers with bad MD5 sums. + Trusty will not install downloaded drivers with control files with + incorrect owners |
| Seth Arnold (seth-arnold) wrote | #3 |
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.