Showing posts with label updates. Show all posts
Showing posts with label updates. Show all posts

Tuesday, May 13, 2008

Ubuntu and Debian users, update OpenSSL now!

It was announced today that there is a critical issue with OpenSSL packages in Debian based distributions such as Ubuntu:

A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a result of this weakness, certain encryption keys are much more common than they should be, such that an attacker could guess the key through a brute-force attack given minimal knowledge of the system. This particularly affects the use of encryption keys in OpenSSH, OpenVPN and SSL certificates.
Be sure to check update manager and download the latest updates!


Saturday, May 10, 2008

New Update Icons in Ubuntu 8.04

Have you noticed the new update icons in Ubuntu 8.04 (Hardy Heron)? The old update icon was an orange box with what looks like a white sun in the middle. It was OK. The new icon is a nine sided star (enneagram) with a white arrow pointing down. I have also noticed a new "Critical Updates" icon that I never saw in Ubuntu 7.10 (Was it there and I just never saw it?). The critical updates icon is a big red down arrow with an exclamation mark in the middle.

I really do like the new icons. They look a lot more defined and get your attention better. I especially like that there is an icon that indicates critical updates now too. I do wish the critical updates icon was more like the regular update icon though. They are so different that it is not obvious at first that they both signify updates are available. Maybe Ubuntu could use the same icon and change the color and/or the little icon inside the icon.

My one other beef with the new update icon is it also looks like the application crash notification icon. I think it is a bad idea to make both of those icons look so similar. Check out the image below to see what I mean.

The new update icons in Ubuntu
(click on the image for the full size version,
PNGs don't resize well!)
Ubuntu 8.04 Update Icons
So what do you think of the new icons?

Wednesday, April 30, 2008

Hardy Heron 1 Week In - Update Time!

Ubuntu 8.04 has been out for almost a week now and I have seen a lot of mixed feelings on different blogs and forums. I would say most users love it but there is the occasional user with some strange and annoying problem. I've had my share of strange and annoying problems too. I've found a way around most of them though. But many of these problems may now be fixed. A bunch of updates have already started rolling out. These are not just security patches either, they are also lots of bug fixes. So be sure to pull down the latest greatest updates. I installed 29 of them today.

Wednesday, February 27, 2008

Ubuntu update manager is better than Windows update manager

Updating your operating system these days is just a fact of life. There are always bugs to fix, security holes to patch and little new features (and sometimes big features, think XP SP2) to push down to users. Both Windows and Ubuntu have update mechanisms in place so users don't have to periodically check and install updates manually. I think if automatic updates didn't exist, most users would never update their systems.

Before Windows had good updates they also had the Code Red worm that affected IIS in July 2001 and Linux had the OpenSSL Slapper worm in September 2002. My home Linux web server got hit by Slapper. The system did have an update feature (the Red Hat Network!) but it was not setup to be automatic. I am not sure why I even had SSL running and open to the world since I didn't use it but that is another story. (If you want to know a little more history about major computer viruses and worms, this Wikipedia page is interesting and helpful: Timeline of notable computer viruses and worms.)

Back to my point - Ubuntu's update manager works well and is not annoying but Windows update makes me want to punch a hole in the wall. I have both Ubuntu and Windows configured to check for updates periodically. Windows checks on whatever schedule Microsoft decided was good and my Ubuntu boxes check daily as I decided was good. I have both configured to go ahead and download updates and let me know when they are ready to be applied.

Ubuntu Update Manager Notification
I don't remember the default behavior of Windows update but I know a lot of people have it setup to install updates automatically. Ubuntu will allow this too and I don't remember its default setting either. Installing the updates automatically sounds great for the novice but I always want to see what is getting updated before I apply any patches to my system. That way if something goes wrong after the updates, I will have an idea what updates caused it and where to start to fix it.

Now we get to the real annoying part. Most of the time Windows updates require a system restart! Why? The only time Ubuntu has ever wanted to restart after installing updates was when a new kernel was installed. What is worse is if you have Windows update configured to automatically install updates it will also automatically restart your system! I don't know about you but I leave a ton of applications up and running all the time. I don't want to come to my computer in the morning and find it freshly restarted with all my applications closed and data lost.

If Windows is configured like mine to ask you to install updates, it will add a little yellow shield in the system tray and occasionally give you a pop up. This is the same way users are notified about updates on Ubuntu.

Windows Updates Notification
But after installing the updates the dreaded "Restart Now" dialog kicks in. I feel like this dialog comes up every 15 minutes or so! It is so annoying. And what is worse is I have occasionally accidentally clicked on "Restart Now" instead of the "Restart Later" button when attempting to keep working instead of being interrupted by this annoying dialog.

NO! I do NOT want to restart now Windows!
If Ubuntu needs to restart, it kindly adds an icon to the system tray. There are no pop ups every 15 minutes that are all to easy to click the wrong button causing your system to just restart right then and there. Windows doesn't even care about anything you may be working on that is unsaved. If you say "Restart Now" it will just start killing applications. Ubuntu updates will occasionally also have a little light bulb letting me know I need to restart some program for the updates to take effect ("some program" has always been Firefox so far). Again, they let me know but they don't annoy me or allow me to screw up something by trying to ignore a dialog.

Ubuntu Restart Required (image thanks to HowtoForge)

To get around the hated "Restart Now" dialog in Windows, I just wait to update when I am about to restart for some other reason. This means updates on my system take longer before they get installed making my system more insecure. It is also getting me in a bad habit and I find that I don't always update Linux when I see that there are new updates.

One final point. Ubuntu also has a great advantage of being able to update your applications as well as the operating system. In Windows, updates don't exist for all those 3rd party applications you installed. You have to manually go out and download an update for each an every program. That assumes you know there are security or bug fix updates to be installed. With Ubuntu, update manager knows about all your applications and updates them along with the OS. Nice!

Tuesday, January 1, 2008

Running the Latest Version of Wine in Ubuntu

I've been trying to get some applications to work in Wine today. I was working on submitting an application to the Wine Application DB but the version of Wine that comes with Ubuntu 7.10 was not listed. Wine puts out releases rather frequently so they don't wont to bother with old versions and possibly old and now resolved issues. The current version of Wine is 0.9.52 but I was running 0.9.46 with no default update from Ubuntu. The Wine AppDB submission form would only accept applications tested as far back as 0.9.47.

I did find an easy way to upgrade my copy of Wine to the latest release though. All you have to do is uninstall the current version of Wine, add a repository, and then in Synaptic Package Manager, add the new version of Wine back. All the details of updating it can be found in this Ubuntu Forum.

Wednesday, December 19, 2007

Fresh Ubuntu Security Updates

This morning when I got into work, there were a number of Ubuntu updates. I have Update Manager setup to download all updates and prompt me to install them. This morning I just installed them without even looking at what was getting installed. I noticed a new kernel was in the mix though and got to wondering what all was fixed. It took me a while to find a Ubuntu Security RSS feed of updates. There is a ubuntu-security-announce mailing list archives page too. You can access the archives of the mailing list online if you don't want to add more email to your inbox. There are a ton of other useful Ubuntu mailing lists also.

And to point out one last thing. If you want to configure how Update Manager handles notification, download and installation of updates, go to System -> Administration -> Software Sources and then the Updates tab. I think you can also access it from the system tray icon when it is displayed. It sure would be nice to be able to access these configuration options with a link from the Update Manager too.