linuxmint / linuxmint/mintupdate
wrong icon and classification of update
Open
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 425
- Forks
- 190
- PR merge metrics
- No merged PRs in 30d
Description
MintUpdate 5.8.8
says gzip is a software update (up arrow icon), whereas changes contain security updates:
gzip (1.10-4ubuntu4.1) jammy; urgency=medium
* Cherry-pick upstream patch to use more portable alignment to resolve
failure to execute on
WSL1. https://github.com/microsoft/WSL/issues/8219 LP: #1966849
-- Dimitri John Ledkov <dimitri.ledkov@canonical.com> Mon, 05 Sep 2022 14:33:59 +0100
gzip (1.10-4ubuntu4) jammy; urgency=medium
* SECURITY UPDATE: arbitrary file override with crafted file names
- debian/patches/CVE-2022-1271-1.patch: avoid exploit via multi-newline
file names in zgrep.in.
- debian/patches/CVE-2022-1271-2.patch: add test in tests/Makefile.am,
tests/zgrep-abuse.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the gzip update shown in the issue and trace MintUpdate's update classification and icon-selection entry points. Confirm that changelog entries containing a SECURITY UPDATE classification receive the security indication rather than the regular software-update icon, then verify the result with an equivalent update case.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- desktop
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100