0
votes
0answers
16 views

List only “security” related upgrades with apt-get upgrade

I'm interested in a shell command that can behave like apt-get dist-upgrade except only list/consider security related package upgrades. For example, limit it to packages in security.ubuntu.com or in ...
1
vote
1answer
27 views

restore patched bash to apt maintained

Last month I manually patched bash on a server running ubuntu 11.10 for the shellshock bug, as suggested in the comments here: What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I ...
2
votes
2answers
114 views

What dangers have the Apt bugs security holes (USN-2348-1) caused?

Just recently 4 bugs in the Packet Manager Apt (the main in Ubuntu) has been discovered. Especially bad for 12.04 LTS as 4 security holes have been found there. My question is to what dangers have ...
1
vote
2answers
46 views

What lines should be commented out in my sources.list file?

I have just updated from Ubuntu 12.04 to 14.04 last weekend. I haven't downloaded any extra programs as of yet. I checked my sources.list file and it has the following lines in it: deb ...
0
votes
2answers
87 views

wget security.ubuntu.com not working on ubuntu

We are able to use wget for other URLs, such as google.com, but wget security.ubuntu.com not working and giving output: Resolving security.ubuntu.com (security.ubuntu.com)... 91.189.92.200, ...
-1
votes
2answers
45 views

Security updates for old-releases

I know that I should upgrade to a newer supported Ubuntu version if possible, but: if you have no possibility to upgrade (for reasons not important here) you have to use the old-releases archive from ...
0
votes
0answers
15 views

Are Ubuntu upgrades signed or encrypted?

When you download updates from the standard Software Updater (which I'm assuming is just a graphical front-end for apt), are these updates signed or encrypted between the server and the user, or are ...
0
votes
1answer
38 views

Can 3rd-party package repositories be trusted? (Are there criteria to test if they're trustworthy?) [duplicate]

(Note: no disrespect whatever to the hard work people that people who run 3rd-party repositories put in.) I came across a package repository, a ppa, that was suggested for getting php5.5 on Ubuntu ...
0
votes
0answers
17 views

Are Key files for repositories fetched over HTTPS?

I'm connecting to the internet through a public internet connection. I want to know if some one can do a MITM attack and give wrong Keyfiles when I update and upgrade. The difference here would be ...
0
votes
1answer
82 views

Why Ubuntu doesn't upgrade to the latest version of GnuPG?

Two days ago GnuPG announced the release of a new stable version. The new version is 1.4.16 but the repository of Ubuntu Saucy have 1.4.14. I don't understand this because the new release cover a ...
0
votes
3answers
97 views

How do I see what PPA or PPAs are installed or in use

Sometimes I install good guy PPAs because someone on askubuntu says to use add-apt-repository . Later I wonder, where have they gone? Where can I find a list of Personal Package Archives that are ...
1
vote
0answers
47 views

sudo apt-get update stuck at 100% [Waiting for headers]? [duplicate]

Here is the sample Hit http://security.ubuntu.com raring-security/main Translation-en Hit http://security.ubuntu.com raring-security/multiverse Translation-en Hit ...
1
vote
2answers
1k views

Ubuntu - apt-get not working behind restricted internet access

I have Ubuntu 12.04 64-bit boxes running in a company but they have internet browsing and firewalls for security. When I do apt-get update or install it fails. But I have a remote server which ip is ...
0
votes
0answers
19 views

apt-get complains about untrusted packages [duplicate]

Since installing Kubuntu 13.04, apt-get (and all other packaging tools) complain about untrusted packages. As an example, when I try to install ruby1.9.1-dev: # aptitude install ruby1.9.1-dev The ...
3
votes
1answer
294 views

unattended-upgrades sends attachment instead of text

I'm trying to setup automatic security updates on Ubuntu Server 12.04 LTS with an email response: sudo apt-get install unattended-upgrades sudo dpkg-reconfigure unattended-upgrades # Answered Yes ...
0
votes
2answers
4k views

apt-get update error using automatic proxy configuration

I am using Ubuntu 10.4.04 LTS with in VMware5. I used automatic proxy configuration and I'm able to use internet from firefox. When I wanted to update apt-get update, I am getting following errors. ...
2
votes
0answers
454 views

Integrity check against package repository?

When there are security updates, I review and install them as soon as possible and think about using automatic updates. From time to time I want to boot from a clean boot CD and check if the system ...
4
votes
1answer
326 views

How to make my server email me when there are security updates?

There's obviously a way to check to see when an update is a security update. I often get greeted by a motd that says "there are N security updates." What I'd like to do is have my server email me a ...
2
votes
1answer
67 views

How do I know if an app is safe to use?

Is there any reliable way to know if something that you install is safe? There are virus scanners like clamtk, but those only seem to focus on Windows files. Should I be concerned about viruses / ...
8
votes
1answer
1k views

Why are the proposed BADSIG (on apt-get update) fixes secure?

I'm running apt-get update, and I see errors like W: GPG error: http://us.archive.ubuntu.com precise Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic ...
3
votes
1answer
3k views

apt lists in /var/lib/apt/lists overwritten with html page for Starbucks wifi terms

I sat down at Starbucks this afternoon to do some work (Ubuntu 12.04 Desktop x64), and got the red-circle-with-white-line error icon in the systray notifying of a package error. Also, apt, aptitude, ...
2
votes
1answer
2k views

how to enable iptables tarpit?

I'm using ubuntu server 10.04 and I have to enable tarpit module . I installed the followning packet : aptitude install xtables-addons-common xtables-addons-source module-assistant auto-install ...
8
votes
2answers
336 views

How do I get security updates for restricted/partner packages?

I want to perform just security updates on Ubuntu 12.04 LTS, keeping the rest of the system unchanged. I need to do this from the command line, no the GUI update manager. I have implemented the ...
1
vote
2answers
150 views

what packages to uninstall for better security?

I have read a recommendation which was stating that after installing one should remove some packages from the default Ubuntu installation, in order to have a more secure server. What are your ...
1
vote
0answers
224 views

Secure APT GPG problem with Release files

I'm experiencing a problem with apt. We're using our own repository and the users apt is configured to check the peer and host of the repository. Furthermore the Release file is verified (with the ...
3
votes
1answer
687 views

How to list all setuid binaries in the Ubuntu repository?

Is there any way I can list all setuid binaries inside the Ubuntu respository? Or does such a list exist somewhere on the web? I have looked at the apt-get options and could not come up with a ...
3
votes
1answer
398 views

Does apt-get automatically check digital signatures?

I am planning to run a production server on Ubuntu LTS 8.04 and I am concerned about security of the packages I am installing I want to make sure that packages that are downloaded by apt-get were not ...
17
votes
2answers
5k views

What is the apt equivalent to “rpm -V” (Verify installed packages)

On a RedHat/CentOS system, I can verify the installed RPMs on my system using rpm -V. What is the Ubuntu or apt equivalent of this command?