question

EnricoWeigeltmetuxITconsult-4860 avatar image
0 Votes"
EnricoWeigeltmetuxITconsult-4860 asked

SECURITY-ALERT: teams-linux: deb messes with apt config and allows remote takeover via update

Heads up!

DON'T EVER install the deb (haven't looked at the rpm yet) as it is !

They silently install a package source for them, so now all packages can be updated, IOW: replaced by
Microsoft. And this isn't removed when ms-teams is uninstalled.

At that moment, they can replace every package on your machine when you're running apt-get update.

No idea whether that's just complete stupidity and missing the elementary basics of package management
or intentional hostile takeover. No matter, DONT install this package directly on your machine.

If you really want it, put it into a container or a dedicated VM.


--mtx

office-teams-linux-itpro
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

0 Answers