Software updater snuck in a package that is unwanted

Chris cpollock at embarqmail.com
Sat Oct 21 13:17:52 UTC 2017


On Sat, 2017-10-21 at 18:48 +0800, Bret Busby wrote:
> On 21/10/2017, Oliver Grawert <ogra at ubuntu.com> wrote:
> > 
> > hi,
> > Am Samstag, den 21.10.2017, 15:11 +0800 schrieb Bret Busby:
> > > 
> > > On 21/10/2017, Colin Law <clanlaw at gmail.com> wrote:
> > > > 
> > > > 
> > > I am not aware of any WPA2 security upgrades, being available, to
> > > protect against the defined ("KRAK" ?) problem, as yet.
> > > 
> > it has been fixed in ubuntu on the 16th:
> > https://usn.ubuntu.com/usn/usn-3455-1/
> > 
> > and has already been rolled out to all users for all supported
> > ubuntu
> > releases (14.04, 16.04, 17.04 and 17.10) on that day...
> > 
> > ciao
> > 	oli
> > 
> > 
> One of the significant points that should, I believe, be remembered,
> regarding the WPA2 vulnerability, is that it is a muli-platform
> problem, so that every device that uses WPA2, is affected, so, for
> example, each modem or router within a network, each cellphone, each
> printer that uses WPA2 in WiFi access, each tablet PC, etc, etc, etc.
> 
> And, some cellphones, such as Android cellphones, simply never get
> system updates, once their particular Android version becomes
> superseded.
> 
> It would have been helpful, if, when Ubuntu implemented the security
> patch for the KRAK (?) WPA2 vulnerability, it was announced on this
> mailing list, as such.
> 
Maybe it would be helpful if you subscribed to this mailing list:

ubuntu-security-announce mailing list 
ubuntu-security-announce at lists.ubuntu.com

Where all security updates are announced.

-- 
Chris
KeyID 0xE372A7DA98E6705C
31.11972; -97.90167 (Elev. 1092 ft)
08:15:57 up 8 days, 20:45, 1 user, load average: 0.92, 0.54, 0.39
Description:	Ubuntu 16.04.3 LTS, kernel 4.10.0-37-generic
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20171021/8517bbb2/attachment.sig>


More information about the ubuntu-users mailing list