[Bug 158715] Periodically call home to check for need for update due to security vulnerability

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=158715

--- Comment #5 from Caolán McNamara <caolan.mcnamara at collabora.com> ---
For the appstore provided case the updates are assumed to get installed by that
usual mechanism so the issue shouldn't really apply there.

And for distro provided builds, the same sort of logic applies, the maintainer
there does the security backports and the os updates take care of it rather
than the individual application.

So its the "direct download" case that is left over. There is the current
notification for an update, but that whole update thing wasn't ever really in
great shape, in that it just says there is an update available at best. What we
should have is something far more automatic, so the esc has fairly regularly
put "Finish MAR-based autoupdater" into the list of ideas to get a budget to
implement, like https://wiki.documentfoundation.org/Development/Budget2021 but
in recent years that pipeline has basically stalled.

In recent days, allotropia have some various commits, like
https://cgit.freedesktop.org/libreoffice/core/commit/?id=13595f6220095d120e13ccb6fbfac1de4c803fe7
which suggest a possible renewed interest to get that implemented/improved

-- 
You are receiving this mail because:
You are on the CC list for the bug.