Questions tagged [security]
Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.
2,477
questions
-1
votes
0
answers
29
views
LUbuntu 22.04 WiFi Hotspot - unable to connect with WPA2 (AES) security
I've set up a Wifi Hotspot from LAN based on this tutorial: Creating a hotspot in Lubuntu
However when I choose Advanced Network Configuration / WiFi Security / WPA & WPA Personal I'm unable to ...
0
votes
0
answers
39
views
Shibboleth configuration in ubuntu 22.04
Does anyone know how to install and configure Shibboleth in Ubuntu 22.04? Any recently updated documentation will be much appreciated.
-1
votes
0
answers
49
views
Working with Ubuntu in Docker from Windows Along with Strict Antivirus
I am trying to work with an Ubuntu Docker Container from my Windows 11 OS.
I am using work PC and they have very strict Antivirus and Security causing me to have blocked IPs whenever I do apt-update ...
0
votes
0
answers
24
views
Protect system disk from attaching to another machine
I have a device (Raspberry PI 3, Orange PI 5) with SSD as main disk, running under Ubuntu 22.04.
This device should be autonome, i.e. autimatically reboot and autorun some services.
There is some ...
-1
votes
0
answers
35
views
The meaning of this: Not vulnerable (5.1.4-0.3)
enter image description here
Does this Not vulnerable (5.1.4-0.3) mean that only versions 5.1.4-0.3 have no impact, or does it mean that versions below 5.1.4-0.3 have vulnerabilities, and versions 5.1....
1
vote
0
answers
21
views
Is there an archive of old security updates? [duplicate]
Is there any way to find previous versions of binary package updates that were posted to a security repository?
Specifically, I am looking for libssl-dev 3.0.2-0ubuntu1.13 for Jammy, because I'm ...
0
votes
0
answers
40
views
Can a USB drive be used as a security key to unlock a Ubuntu PC? [duplicate]
I am currently looking to switch from Windows 10 to Ubuntu but I still want to use the security key I already have for unlocking my PC. Windows has a software called USB Raptor but this is not on ...
0
votes
0
answers
15
views
one portal to authenticate different applications
I have installed ojs, koha, dspace7 and moodle succesfully on ubuntu 20.04 and I need to use one portal to authenticate the login to all these service, any guide or technical reference I can rely on ...
-1
votes
0
answers
45
views
Please make Loging of user is done by touch of trackpad in ubuntu. My laptop mode is Hp probook 440 g8 notebook PC.I am using ubuntu 23.10 [duplicate]
Please make Loging of user is done by touch of trackpad in ubuntu.Otherwise, my laptop's trackpat will be damaged. My laptop mode is Hp probook 440 g8 notebook PC.I am using ubuntu 23.10.I am unable ...
0
votes
0
answers
35
views
I am unable to find login with fingerprint & login with faceid options on ubuntu's user setting. My Laptop model is Hp probook 440 g8 notebook PC
I just got a new Hp probook 440 g8 notebook PC, which includes a fingerprint scanner. It works fine for Windows.Fingerprint sensor did not detected in Hp probook 440 g8 notebook PC.
-1
votes
1
answer
223
views
Use UFW (firewall) to deny incoming ping (ICMP) requests?
The ufw (uncomplicated firewall) command line app does not have any option for disabling incoming ICMP Internet protocol requests. ICMP is used mainly by ping to discover IP addresses of servers on ...
-1
votes
1
answer
100
views
Ubuntu 22.04 LTS OVAL missing version check for vulnerability in older kernel
On the NVD website, CVE-2023-1989 is stated as being present in various kernels, among them 5.11 to 5.15.105. After an OpenSCAP scan of a 5.15.0 image, I noticed that vulnerability and several others ...
0
votes
1
answer
136
views
Benefit of using secure boot with MOK over disabling secure boot
Following this guide, I was able to enroll a Machine Owner Key (MOK) to sign my NVIDIA (proprietary) driver. It is fairly easy to set up and it works fine. So far I am happy with it.
I had to enter a ...
0
votes
1
answer
51
views
I was installing / enableing fips 140 , rebooted as instructed now my wifi wont let me log rejecting the correct pw. Running Ubuntu Studio 20.13on
I was attempting to make a compliant
Laptop and after enabling fips 140. I can no longer log in to my Wi-Fi networks with what were the proper passwords, it asks for password or security encryption ...
1
vote
0
answers
29
views
Is it possible to make the lock screen's background a feed from the front-facing camera?
People tend to behave better when they know they're being watched, even by a machine. To deter people screwing with my desk, is it possible to have the lock screen background be a (blurred) camera ...
2
votes
3
answers
1k
views
Clamscan viruses scanning, too many viruses
I installed ClamAV to check for some malware. It took much time, 4 hours, to scan my PC, and the results are in this screenshot:
I am on Ubuntu 22.04 and tried to stay safe, but I wanted to double-...
0
votes
0
answers
33
views
Specify L2TP VPN to use other port
I am currently at a hotel and they seem to block VPN use. I assume they block it by looking into the port it uses.
I would like to use my company VPN (L2TP). So, I think my best bet is to change the ...
0
votes
0
answers
39
views
How to keep neighbors from connecting to my laptop bluetooth?
ubuntu 22.04 here on a lenovo thinkpad carbon x 7th generation. I currently have bluetooth enabled via the bluez and blueman packages.
I keep getting notifications that different devices are ...
-1
votes
1
answer
158
views
Traceroute Vulnerability (CVE-2023-46316) fixes are not released [duplicate]
We are currently using ubuntu 20.04 LTS version in our environment, This traceroute CVE-2023-46316 vulnerability was reported for the Installed package : traceroute_1:2.1.0-2,
and this Vulnerability ...
1
vote
1
answer
719
views
Unrecognized accessed paths - is my server being attacked?
My website seems to be having some malicious visitors and crashing my site often. I am now tracking what they are doing on my site. In my log, I found out they are accessing the following paths ...
1
vote
2
answers
306
views
CVE-2023-3824, CVE-2023-3823 on PHP
I have a focal machine ("Ubuntu 20.04.6 LTS") with php 7.4 installed (7.4.3-4ubuntu2.19), a vulnerability scan warned me about CVE-2023-3824, CVE-2023-3823 in PHP but the following:
https://...
1
vote
0
answers
82
views
Issues with ARP poisoning using ettercap [closed]
Sorry if this is the wrong place to ask.
I am currently attempting to use a program called Ettercap to initiate a man in the middle attack (within my own network, in case I need to specify.). In this ...
1
vote
2
answers
246
views
Apache starting automatically with the system
Using 22.04 on a laptop. I have XAMPP installed, but when I try to start XAMPP through Terminal, it says
Starting XAMPP for Linux 8.2.0-0...
XAMPP: Starting Apache...fail.
XAMPP: Another web server ...
0
votes
0
answers
59
views
Location problem
I recently began using Ubuntu about 2-3 weeks ago and have encountered a significant issue with my location settings. When I check my physical location on my laptop, it shows me in a completely ...
6
votes
1
answer
808
views
Why is user.max_user_namespaces enabled in Ubuntu by default?
I'm looking into kernel exploits in recent years, approx 80% of them requires user.max_user_namespaces with a positive value.
This setting is disabled in CentOS since 6.X series, but enabled in all ...
0
votes
1
answer
48
views
i just have Downloaded spectacle and the app icon shows as gear is this a malicious app or this is just a problem?
I just Downloaded spectacle sudo apt-get install spectacle and the app icon shows as gear. Is this a malicious app or this is just a problem?
0
votes
1
answer
197
views
Jenkins Installation errors on local Ubuntu
I am installing jenkin on my local ubuntu I recieved these errors>
: GPG error: https://pkg.jenkins.io/debian-stable binary/ Release: The following signatures couldn't be verified because the ...
1
vote
1
answer
94
views
Client apps are opened in wrong vnc display
I use ubuntu 22.04; gnom(wayland); tightvncserver.
When i open client, like mate-calc, on vncviewer display :3 it pop-up on the console of the computer (display :0) instead of the vnc viewer display :...
1
vote
0
answers
43
views
Enforcing and running apps with memory tagging extension
As you may already know, MTE is available in Ubuntu22LTS or above according to announcement.
We know that we can add arm64.nomte for disabling this feature. But we don't know how we can enable and ...
1
vote
1
answer
168
views
Find CVE fixed in linux-image-generic
I want to know which CVE is fixed in linux-image-generic, but this information is unavailable in changelog,
apt changelog linux-image-generic | cat
Where can I find it?
0
votes
2
answers
505
views
What exactly traceroute's "CVE-2023-46316" is?
As description in CVE-2023-46316: In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.
I'm wondering how the attacker infiltrated the system ?
...
8
votes
1
answer
1k
views
When will CVE message stop showing?
I'm still receiving the following upon sudo apt upgrade:
# Canonical released microcode updates for both Intel (CVE-2022-40982) and AMD
# (CVE-2023-20593). ‘Unattended upgrades’ provide security ...
1
vote
1
answer
138
views
Some concerns about CVE description on Ubuntu?
For some issues mentioned in USN-5342-1: Python vulnerabilities:
David Schwörer discovered that Python incorrectly handled certain
inputs. An attacker could possibly use this issue to expose ...
0
votes
0
answers
195
views
Ubuntu 22.04 USG hardening script breaks DNS resolution
Since a few days, I noticed that running USG hardening tool on a freshly installed Ubuntu 22.04 server, breaks DNS resolution.
Running for example dig google.com throws out an error:
;; communications ...
0
votes
0
answers
182
views
ARP Spoofing from Ubuntu
I receive ARP Spoofing alerts in my network coming from an Ubuntu
server that I have just installed.
the server have two network cards that are connected to the same network with
different IPs.
$ ...
0
votes
0
answers
178
views
How do I upgrade open-vm-tools to 12.3.5 on an internet isolated server
I am required to upgrade to open-vm-tools 12.3.5 to resolve CVE-2023-34058.
My few Ubuntu servers are isolated from the internet so "sudo apt update && sudo apt upgrade" are not an ...
3
votes
2
answers
1k
views
Are login passwords saved on the machine or only a hash version of the password?
Are login passwords saved on the machine or only a hash version of the password? If only a hash version of the login password is saved, which hash method is used? In which folder is it stored on the ...
0
votes
1
answer
102
views
which package file for ca-certificates do I download? [duplicate]
i have a very old server, hosted at Digital Ocean, running Ubuntu 16.04.5 LTS (Xenial Xerus), but no time to migrate to a new one.
when I try apt-get updates, it shows the error
CAfile: /etc/ssl/...
0
votes
0
answers
228
views
How to remove StripedFly malware from Ubuntu 22.04?
I was reading this article, and decided to search for sd-pam in the processes of one of my laptops.
I did ps -x | grep -i "sd-pam", and got
2864 ? S 0:00 (sd-pam)
29172 pts/0 ...
0
votes
0
answers
583
views
Secure Erase NVMe Drive with nvme cli //CMD_SEQ_ERROR:
Trying to Secure Erase NVM drive but failed with CMD_SEQ_ERROR:
Below is a summary of what/how I am doing to perform the Secure Erase.
0
votes
0
answers
81
views
Does anyone know why Ubuntu 22.04.3 LTS is installing an ROS
Could someone explain why a clean install of Ubuntu 22.04.3 LTS keeps installing a robot on machine and a generic kernel that can't be updated so that I can comply with FIPS? It is driving me crazy ...
4
votes
0
answers
65
views
Are security updates phased too?
I just noticed today that some Nvidia-related updates were being phased.
The thing is, these are security updates.
Until now, I was thinking security updates would never be phased, for… well, security ...
0
votes
0
answers
15
views
Logging into online Google account through settings crashes the only way i can make this work
uninstalling security yubico keys from google manage security keys is the only way i can make this work.
Does anyone know how to do this with the usb security keys registered?
1
vote
1
answer
100
views
When are security updates merged into the update pocket?
To my understanding, bug and vulnerability fixes are released separately in -updates and -security. 1 patch fixes CVE(s) for 1 package (no cumulative patches like in windows). There is a patch for ...
-2
votes
1
answer
89
views
What does the empty field means in CVE Tracker?
In the CVE tracker page, what does the empty — field mean?
For example, in this link: https://ubuntu.com/security/cves?q=CVE-2016-5696
Is the CVE not applicable to 20.04 LTS, or was its risk not ...
3
votes
1
answer
627
views
Thunderbird updated to major new version, even on LTS
I'm on Ubuntu 22.04, which is a long-term support release. I though that this was supposed to just have security fixes, not general updates.
I was therefore a bit surprised to discover that ...
0
votes
0
answers
29
views
Screen occasionally autoscrolling
Ubuntu 20.04
From past couple of days, my screen autoscrolls randomly. Its like scrolls then waits, then scrolls.
The interesting thing is it keeps happening for a few seconds even when I turn off the ...
0
votes
0
answers
165
views
Security headers not responding on Apache 2.4 Ubuntu 22.04 with PHP8.1-FPM HTTP/2
I have tried this:
1- .htaccess
RewriteEngine On
RewriteCond %{HTTP:Authorization} ^(.*)
RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]
2- .htaccess
RewriteEngine On
RewriteRule .* - [E=...
0
votes
0
answers
123
views
Failing to import new PKCS12 certificate into Evolution Mail
my PKCS12 certificate from my workplace institution expires in a few days. I already got a new one. Yet, I'm failing to import it into Evolution mail. When selecting Edit > Preferences > ...
1
vote
1
answer
165
views
Sources.list Critical Vulnerability link update
This question is related to this GitHub post.
I just wanted to make sure if I got the link correctly and not made an error I replace the ma.archiveUbuntu links with http://security.ubuntu.com/ubuntu
...