Hi Sean,

Sean Whitton <spwhit...@spwhitton.name> ezt írta (időpont: 2020. dec.
28., H, 0:05):
>
> Hello,
>
> On Sun 27 Dec 2020 at 08:11AM GMT, Paul Wise wrote:
>
> > I think Debian stable users should enable automatic upgrades (IIRC
> > that is the case now). Debian unstable/testing users should probably
> > only enable safe upgrades that don't remove packages.
>
> I'm pretty sure it's not default because the security team do not
> consider unattended-upgrades sufficiently robust.  I'm sorry for not
> going ahead and verifying but I thought it should be mentioned.

If that's the case (i.e. security team having concerns) I'd like to
learn about them (wearing my unattended-upgrades maintainer hat).
The version in testing is pretty solid IMO, but there is still enough
time for fixes before the next stable release.

Also please note that unattended-upgrades does not perform upgrades
which include removals. The original report was about Gnome's upgrade
mechanism as I understand it, which is disabled in Ubuntu for several
reason including the lack of safety measures applied in
unattended-upgrades:
https://bugs.launchpad.net/ubuntu/+source/gnome-software/+bug/1775226

Cheers,
Balint

>
> --
> Sean Whitton

Reply via email to