This is an observation while watching how a recent batch of updates progresses in Software Updater. I’m sure all settings are default (in particular, repositories).
Only after enabling multiverse (which wasn’t by default from install) did I get the recent Flash Security update in both Synaptic and Software Updater.
So Flash seems to be installed by default but not updated by default? Is this a good situation? Anything defective with my observation?
Just my 2 cents. I realize this may be a Ubuntu thing, of course.
EDIT: I’m sure Flash was installed because of checking off the proprietary option during install. If this wanted to be fixed, I’m sure this setting is the place.
Hi again
My findings are different. I loaded the extra codecs from the welcome center and still flashplugin-installer is not yet installed. Maybe verify the install.
Hi @wolfman. Sorry if I gave the wrong impression. This really isn’t for my system but more an observation that made me say… “WHOA! That’s not good!”
@anon42388993: I’ve been looking at Synaptic history and double checking things. Synaptic history has zero match for “flash” and I use synaptic for everything. The only “apt” in bash history is installing synaptic itself on day 1, so nothing there. No “deb” in bash history either.
EDIT: I forget the install options exact wording but recall I checked the proprietary and update options. I remember being impressed with updating-during-install because it actually looked like it worked.
I did build this 16o4 install from the server edition iso, so maybe my install is different from default. Now I’m going to have to download the mate iso and see for myself
@anon42388993 I installed this VM specifically to test putting /home and /var on their own partitions, saving SSD writing when I do my main box install. I can’t think of anything in that process that would affect this but I’ll mention it anyway. My goal was also to have a reference default install.
Half of me wants you to find this big hole, too, the other half would like the hole to not exist. Obviously, it could be something I did… but what?
You are correct, the flashplugin will be loaded at time of system install when you check the restricted extras box. I had forgotten that it was necessary to add this to my install when not using the mate live dvd.
Also fully updated. Could your problem be "phased updates"?
I don't think so. It's clearly a security update and appears in both Synaptic and Software Updater at the same time. The appearance is tied directly to enabling multiverse.
The basic problem is Flash gets installed but multiverse isn't enabled, right? Did you confirm multiverse is not enabled? That's the only update path AFAIK.
Now THAT is a difference and a key to the issue. No multiverse no restricted updates. I can't imagine any way I would have disabled it. Not impossible, of course.
EDIT: The above shows it's NOT there, of course, since it's the VM back before I enabled it. Once enabled these lines change:
@anon42388993 Well, I also reinstalled from the exact ISO I used and even manually partitioned /home and /var similar to the other VM.
Multiverse is enabled.
Conclusion…
Most likely, I must have disabled it somehow, even though I don’t know how that happened. I wasn’t really doing anything that would get into changing repos.
I updated during install and the repos are in a different state. Shouldn’t do anything. Unlikely.
Sompin’ else. Unlikely.
I guess there’s no issue now, if there ever was. Sorry for the false alarm. Of course it’s gonna bug me.