4 ms·

Updated WhatsApp on my iphone just now. The version I got was 2.19.50. According to the CVE it's still vulnerable. Unable to get 2.19.51 which is the first fixe

Updated WhatsApp on my iphone just now. The version I got was 2.19.50. According to the CVE it's still vulnerable. Unable to get 2.19.51 which is the first fixed version. Is this just me? Or is everyone else updating to a still-vulnerable version?

majjam 7y ago
Just updated via UK iOS app store and its 2.19.50
- whycomb 7y ago
  You're still vulnerable then. "Affected versions: ... WhatsApp for iOS prior to v2.19.51" from https://www.facebook.com/security/advisories/cve-2019-3568 https://www.facebook.com/security/advisories/cve-2019-3568 The news outlets are all telling us to update, but until WhatsApp/Apple get their act together, there's no point. Worse still, people won't realise they need to do it again and will remain vulnerable indefinitely.
  - crucialfelix 7y ago
    I'm on Android. It auto-updated on May 10th to v2.19.134 "The issue affects WhatsApp for Android prior to v2.19.134"
    - whycomb 7y ago
      The problem is iOS AppStore. If you update via the "Updates" tab, you don't get the latest version. But if you search for WhatsApp as if installing it for the first time, then you get the new version.
      - crucialfelix 7y ago
        Yep sure, I was just reporting from the Android side since your comment caused me to go check.
  - Scoundreller 7y ago
    Lol, App Store for 2.19.51 describes the update as: > You can now see stickers in full screen when you long press a notification If that’s how we encourage critical security updates, I’ll suspect that Facebook themselves are behind all of this.
    - 1f60c 7y ago
      I don’t think this is a conspiracy by Big Social. If they really want to do that, they can still do that. I assume the stickers thing truly was the most notable patch, and they didn’t want to scare people & tip off the attackers.
      - Scoundreller 7y ago
        If I were anti-update (and sometimes I am, eg: limited bandwidth), full-screen stickers is the most unnecessary update I could imagine. At least say something like “bug fixes”. Some kind of carrot to discourage me from thinking “Total waste of time and too many developers”.
Tepix 7y ago
Have you tried pulling down on the updates screen of the iOS app store? It refreshes the list of apps to be updated.
- Scoundreller 7y ago
  That did it. Thank you. And to think I thought I installed all of my pending updates yesterday.
entropy_ 7y ago
You need to go to the app store app, then the updates tab and pull down to refresh(yes, the updates tab, not WhatsApp listing in the store). When you do that, you'll see the newest version becomes available for update. This happens whenever an update is set to phased release and hasn't reached 100% yet.

majjam 7y ago

Just updated via UK iOS app store and its 2.19.50

whycomb 7y ago
You're still vulnerable then. "Affected versions: ... WhatsApp for iOS prior to v2.19.51" from https://www.facebook.com/security/advisories/cve-2019-3568 https://www.facebook.com/security/advisories/cve-2019-3568 The news outlets are all telling us to update, but until WhatsApp/Apple get their act together, there's no point. Worse still, people won't realise they need to do it again and will remain vulnerable indefinitely.
- crucialfelix 7y ago
  I'm on Android. It auto-updated on May 10th to v2.19.134 "The issue affects WhatsApp for Android prior to v2.19.134"
  - whycomb 7y ago
    The problem is iOS AppStore. If you update via the "Updates" tab, you don't get the latest version. But if you search for WhatsApp as if installing it for the first time, then you get the new version.
    - crucialfelix 7y ago
      Yep sure, I was just reporting from the Android side since your comment caused me to go check.
- Scoundreller 7y ago
  Lol, App Store for 2.19.51 describes the update as: > You can now see stickers in full screen when you long press a notification If that’s how we encourage critical security updates, I’ll suspect that Facebook themselves are behind all of this.
  - 1f60c 7y ago
    I don’t think this is a conspiracy by Big Social. If they really want to do that, they can still do that. I assume the stickers thing truly was the most notable patch, and they didn’t want to scare people & tip off the attackers.
    - Scoundreller 7y ago
      If I were anti-update (and sometimes I am, eg: limited bandwidth), full-screen stickers is the most unnecessary update I could imagine. At least say something like “bug fixes”. Some kind of carrot to discourage me from thinking “Total waste of time and too many developers”.

Tepix 7y ago

Have you tried pulling down on the updates screen of the iOS app store? It refreshes the list of apps to be updated.

Scoundreller 7y ago
That did it. Thank you. And to think I thought I installed all of my pending updates yesterday.

entropy_ 7y ago

You need to go to the app store app, then the updates tab and pull down to refresh(yes, the updates tab, not WhatsApp listing in the store). When you do that, you'll see the newest version becomes available for update. This happens whenever an update is set to phased release and hasn't reached 100% yet.