Lacking update validation on console upgrade
|Affected version:||2.0||Affected Architecture:|
I nicely blew up a 2.0 RC box by accidentally pasting in the download URL for the iso instead of the update file in the console upgrade. Got a signature warning but I dismissed it since the update wasn't signed. For real world updates at least that should register that something is wrong. Didn't notice until it had finished, and it left the box unbootable (can't mount root, not sure exactly what it did). Need to do more validation of the update file for the console upgrade to prevent that.