** Description changed:

+ [ Impact ]
+ 
+ Application makes a call out to https://api.github.com/ by default,
+ which at a minimum leaks to a third party that the user is using this
+ program. If a new version is available, user may attempt to install it
+ via a route other than apt. Versions from apt should manage their own
+ updates.
+ 
+ [ Test Plan ]
+ 
+ For each affected $series:
+ 
+ * sudo apt install rclone-browser
+ * rclone-browser
+ * Select File / Preferences
+ * Observe check boxes under "updates notification" are both checked
+ 
+ * Exit application
+ * sudo apt install $series-proposed rclone-browser
+ * rclone-browser
+ * Select File / Preferences
+ * Observe check boxes under "updates notification" are both unchecked and 
disabled
+ 
+ * Close the preferences dialog
+ * Click "Config..." at the bottom of the main window
+ * Type "n" for new remote
+ * Given the new remote a name, e.g. "foo"
+ * Enter "local" for the storage
+ * Enter "n" to skip editing the advanced config
+ * Enter "y" to keep the remote
+ * Enter "q" to quit configuration
+ * Click "Refresh" at the bottom of the main window
+ * Select the new "foo" remote
+ * Click "Open" at the bottom of the main window
+ * Navigate to your home folder (this remote just accesses the local 
file-system)
+ * Select some trivial file (e.g. .bashrc)
+ * Right click and select "Download"
+ * Provide a destination folder, e.g. "/home/$USER/Downloads"
+ * Select "Run" at the bottom of the dialog
+ * Verify the transfer completed successfully
+ 
+ [ Where Things Could Go Wrong ]
+ 
+ The patch may affect more than intended. To guard against this, the test
+ case includes a basic functionality check covering configuration and a
+ trivial transfer.
+ 
+ [ Original Description ]
+ 
  There is no need for the packaged version to check upstream for a newer
  release.  The package is managed by the Ubuntu release team.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2059246

Title:
  [SRU] packaged version should not check for latest release

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rclone-browser/+bug/2059246/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to