Please update your system - dangerous security flaw

Releases and other announcements
Forum rules
Section reserved for the team. You can reply to announcements here but not post new topics.

Re: Please update your system - dangerous security flaw

Postby miket on Thu May 15, 2008 9:33 am

Hi !

newW2 wrote:I had to refresh mintUpdate in Daryna twice to see this update; Elyssa had no problem it was there waiting for me to update.


I think the worrying thing here is that if I relied solely on Mint-Update I would miss out on a lot updates for packages which I have installed/use.

At least having apt on the CLI it gives me the ability to check what is going on :)

Mike.
User avatar
miket
Level 5
Level 5
 
Posts: 524
Joined: Tue Mar 04, 2008 5:50 am
Location: UK & France

Linux Mint is funded by ads and donations.
 

Re: Please update your system - dangerous security flaw

Postby Ambystoma on Thu May 15, 2008 8:48 pm

I got an email warning from my uni's ITS office today, but sort of blew it off 'til I saw it here on the forums. :oops: Everything worked fine for me on Daryna using mintupdate. All the updates showed up and were installed. Thanks for the heads up. :)
Ambystoma
Level 1
Level 1
 
Posts: 4
Joined: Wed Apr 09, 2008 2:14 pm
Location: Boulder, CO & Los Angeles, CA

Re: Please update your system - dangerous security flaw

Postby Sakonim on Sat May 17, 2008 5:08 am

I just saw ssl-cert being held back when I installed something from the command line. I refreshed mint-update a couple of times but didn't see it appear. I ended up doing 'aptitude safe-upgrade' just to be on the safe side.

Edit - Actually doing 'aptitude safe-upgrade' didn't solve it. Upgrading from synaptic worked.
Image

At any street corner the feeling of absurdity can strike any man in the face. - Albert Camus
User avatar
Sakonim
Level 2
Level 2
 
Posts: 94
Joined: Tue Apr 15, 2008 2:25 pm

Re: Please update your system - dangerous security flaw

Postby red-e-made on Sat May 17, 2008 1:48 pm

OK, I checked everything and I'm pretty sure I'm well upgraded. But I wanted to direct a question to Husse.

I found this article from a Metafilter thread on this very topic, and I'm curious to know, should we be following the procedures listed in the LiveJournal article as well?

Also, is there something else we need to do if we feel we've been breached before installing the updates, or will installing the updates be enough? I ask because the link you provided advises to not only install the updates but to also "regenerate private keys". I have no idea what this means. Can anyone explain?
Last edited by red-e-made on Sat May 17, 2008 2:31 pm, edited 1 time in total.
User avatar
red-e-made
Level 5
Level 5
 
Posts: 525
Joined: Sat Jul 14, 2007 11:31 am

Re: Please update your system - dangerous security flaw

Postby Husse on Sat May 17, 2008 2:23 pm

If you updated and don't have any keys then you're ok
I did not find any here in my system
Image
Don't fix it if it ain't broken, don't break it if you can't fix it
Husse
Level 21
Level 21
 
Posts: 19714
Joined: Sun Feb 11, 2007 7:22 am
Location: Near Borås Sweden

Re: Please update your system - dangerous security flaw

Postby red-e-made on Sat May 17, 2008 2:33 pm

Husse wrote:If you updated and don't have any keys then you're ok
I did not find any here in my system


Sorry, I don't know what "keys" means in this context. Or maybe I do, by a different name. Can you elaborate?
User avatar
red-e-made
Level 5
Level 5
 
Posts: 525
Joined: Sat Jul 14, 2007 11:31 am

Re: Please update your system - dangerous security flaw

Postby Sakonim on Sat May 17, 2008 9:16 pm

I'm giving the Elyssa beta (032) a spin (looks very impessive so far) but I've encountered the same problem there. Not all of the important openssl updates are being detected by mint-update. Isn't this bit of a security risk? What is the official method of updating the system in these circumstances?
Image

At any street corner the feeling of absurdity can strike any man in the face. - Albert Camus
User avatar
Sakonim
Level 2
Level 2
 
Posts: 94
Joined: Tue Apr 15, 2008 2:25 pm

Re: Please update your system - dangerous security flaw

Postby Husse on Sun May 18, 2008 7:33 am

Install the latest mintUpdate - it should fix the "do not find" problem
keys in this connection is what's used in a ssl connection with your bank or so. But I think the keys are generated by the bank server
Image
Don't fix it if it ain't broken, don't break it if you can't fix it
Husse
Level 21
Level 21
 
Posts: 19714
Joined: Sun Feb 11, 2007 7:22 am
Location: Near Borås Sweden

Re: Please update your system - dangerous security flaw

Postby Sakonim on Fri May 23, 2008 6:11 pm

How would I install the latest version of mintupdate on Daryna. Is that possible?
Image

At any street corner the feeling of absurdity can strike any man in the face. - Albert Camus
User avatar
Sakonim
Level 2
Level 2
 
Posts: 94
Joined: Tue Apr 15, 2008 2:25 pm

Linux Mint is funded by ads and donations.
 
Previous

Return to Releases & Announcements

Who is online

Users browsing this forum: No registered users and 4 guests