remediating vulnerabilities
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

The Enhanced LIVEcommunity Experience is finally here! Learn all about it.

remediating vulnerabilities

L2 Linker

My scanning team keeps finding vulnerabilities on Expedition and keep requesting I patch them. They all seem to be related to Linux not Expedition itself. I know that I can't upgrade the version of Ubuntu that it runs on. Suggestions? 

 

list of some of the vulnerabilities

 

Apache

CVE-2017-15715

CVE-2016-8743

CVE-2019-0211

CVE-2018-1333

CVE-2016-2161

CVE-2016-8740

CVE-2016-5387

CVE-2017-15710

CVE-2016-0736

CVE-2018-1303

CVE-2016-4979

CVE-2017-9798

CVE-2019-0217

CVE-2018-17199

 

 

18 REPLIES 18

L4 Transporter

Hello @rodill 

 

Update your apache2 service to patch these vulnerabilities. The latest version of apache2 is running on 2.4.46 so I used that in this example and after you restart apache2 it should be reachable, and please back up the VM if for any event you have problems after the upgrade.

 

sudo add-apt-repo ppa:ondrej/apache2
sudo apt-get install apache2=2.4.46-2+ubuntu16.04.1+deb.sury.org+3
apache2 -v (it is now on the latest)
sudo service apache2 restart

 

thanks for the suggestions. The first command doesn't comeback as a valid command. The expedition is just as Palo supplied it if that matters in this instance. I run the version check and I get this

 

Server version: Apache/2.4.18 (Ubuntu)
Server built: 2020-08-12T21:35:50

 

 

Hello @rodill 

 

The first command is reaching out to a remote repository please make sure if you are running a proxy it has access to communicate with it. The Apache Version is 2.4.18 so when you run what I suggested then you should now be on 2.4.46 when you run the version check.

thanks to your suggestions I found I needed to run this

 

sudo add-apt-repository ppa:ondrej/apache2
sudo apt update
sudo apt upgrade
sudo apt-get dist-upgrade

this did the trick for me on the upgrade, will wait on the scanning team, thanks again 

Hello @rodill,

 

You are not supposed to run any upgrade on the Ubuntu image that is why I did not include that in my commands, it will break the expedition parser.

so that worked on one of my expedition boxes, but when I try to upgrade the other I get error after apt upgrade

 

Err:1 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main amd64 python3-gdbm amd64 3.6.5-3~16.04.york4
403 Forbidden [IP: 91.189.95.85 80]
E: Failed to fetch http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu/pool/main/p/python3-stdlib-extensions/python3-g... 403 Forbidden [IP: 91.189.95.85 80]

E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

 

suggestions?

Hello @rodill 

 

Can you run another update and tee the output log file so I can view it in it's entirety?

 

sudo apt-get update | tee update.log

expedition@Expedition:~$ sudo apt-get update | tee update.log
[sudo] password for expedition:
Hit:2 http://us.archive.ubuntu.com/ubuntu xenial InRelease
Get:3 http://us.archive.ubuntu.com/ubuntu xenial-updates InRelease [109 kB]
Hit:4 http://sgp1.mirrors.digitalocean.com/mariadb/repo/10.1/ubuntu xenial InRelease
Ign:1 https://www.rabbitmq.com/debian testing InRelease
Ign:6 https://conversionupdates.paloaltonetworks.com expedition-updates/ InRelease
Get:7 http://us.archive.ubuntu.com/ubuntu xenial-backports InRelease [107 kB]
Get:8 http://security.ubuntu.com/ubuntu xenial-security InRelease [109 kB]
Hit:9 http://ppa.launchpad.net/adiscon/v8-stable/ubuntu xenial InRelease
Ign:5 https://www.rabbitmq.com/debian testing Release
Ign:15 https://conversionupdates.paloaltonetworks.com expedition-updates/ Release
Ign:10 https://www.rabbitmq.com/debian testing/main amd64 Packages.diff/Index
Hit:16 http://ppa.launchpad.net/deadsnakes/ppa/ubuntu xenial InRelease
Ign:11 https://www.rabbitmq.com/debian testing/main i386 Packages.diff/Index
Ign:19 https://conversionupdates.paloaltonetworks.com expedition-updates/ Packages.diff/Index
Ign:20 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial InRelease
Ign:12 https://www.rabbitmq.com/debian testing/main all Packages
Ign:13 https://www.rabbitmq.com/debian testing/main Translation-en_US
Ign:21 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en_US
Get:22 http://ppa.launchpad.net/ondrej/apache2/ubuntu xenial InRelease [23.8 kB]
Ign:14 https://www.rabbitmq.com/debian testing/main Translation-en
Ign:23 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en
Ign:17 https://www.rabbitmq.com/debian testing/main amd64 Packages
Ign:18 https://www.rabbitmq.com/debian testing/main i386 Packages
Ign:24 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial Release
Ign:25 https://conversionupdates.paloaltonetworks.com expedition-updates/ Packages
Ign:12 https://www.rabbitmq.com/debian testing/main all Packages
Ign:26 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main amd64 Packages.diff/Index
Ign:21 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en_US
Ign:13 https://www.rabbitmq.com/debian testing/main Translation-en_US
Ign:27 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main i386 Packages.diff/Index
Ign:14 https://www.rabbitmq.com/debian testing/main Translation-en
Ign:23 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en
Ign:17 https://www.rabbitmq.com/debian testing/main amd64 Packages
Ign:28 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main all Packages
Ign:18 https://www.rabbitmq.com/debian testing/main i386 Packages
Ign:25 https://conversionupdates.paloaltonetworks.com expedition-updates/ Packages
Ign:12 https://www.rabbitmq.com/debian testing/main all Packages
Ign:29 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main Translation-en_US
Ign:13 https://www.rabbitmq.com/debian testing/main Translation-en_US
Ign:21 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en_US
Ign:14 https://www.rabbitmq.com/debian testing/main Translation-en
Ign:30 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main Translation-en.diff/Index
Ign:17 https://www.rabbitmq.com/debian testing/main amd64 Packages
Ign:23 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en
Ign:31 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main amd64 Packages
Ign:18 https://www.rabbitmq.com/debian testing/main i386 Packages
Ign:12 https://www.rabbitmq.com/debian testing/main all Packages
Ign:25 https://conversionupdates.paloaltonetworks.com expedition-updates/ Packages
Ign:32 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main i386 Packages
Ign:13 https://www.rabbitmq.com/debian testing/main Translation-en_US
Ign:21 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en_US
Ign:14 https://www.rabbitmq.com/debian testing/main Translation-en
Ign:28 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main all Packages
Ign:17 https://www.rabbitmq.com/debian testing/main amd64 Packages
Ign:18 https://www.rabbitmq.com/debian testing/main i386 Packages
Ign:23 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en
Ign:29 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main Translation-en_US
Ign:12 https://www.rabbitmq.com/debian testing/main all Packages
Ign:13 https://www.rabbitmq.com/debian testing/main Translation-en_US
Hit:25 https://conversionupdates.paloaltonetworks.com expedition-updates/ Packages
Ign:33 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main Translation-en
Ign:14 https://www.rabbitmq.com/debian testing/main Translation-en
Ign:17 https://www.rabbitmq.com/debian testing/main amd64 Packages
Ign:21 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en_US
Ign:31 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main amd64 Packages
Ign:18 https://www.rabbitmq.com/debian testing/main i386 Packages
Ign:32 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main i386 Packages
Ign:12 https://www.rabbitmq.com/debian testing/main all Packages
Ign:23 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en
Ign:13 https://www.rabbitmq.com/debian testing/main Translation-en_US
Ign:28 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main all Packages
Ign:21 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en_US
Ign:14 https://www.rabbitmq.com/debian testing/main Translation-en
Err:17 https://www.rabbitmq.com/debian testing/main amd64 Packages
404 OK
Ign:29 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main Translation-en_US
Ign:23 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en
Ign:18 https://www.rabbitmq.com/debian testing/main i386 Packages
Ign:33 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main Translation-en
Ign:31 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main amd64 Packages
Ign:32 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main i386 Packages
Ign:28 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main all Packages
Ign:29 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main Translation-en_US
Ign:33 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main Translation-en
Ign:31 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main amd64 Packages
Ign:32 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main i386 Packages
Ign:28 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main all Packages
Ign:29 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main Translation-en_US
Ign:33 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main Translation-en
Ign:31 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main amd64 Packages
Ign:32 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main i386 Packages
Ign:28 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main all Packages
Ign:29 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main Translation-en_US
Ign:33 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main Translation-en
Err:31 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main amd64 Packages
403 Forbidden [IP: 91.189.95.85 80]
Ign:32 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main i386 Packages
Ign:33 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main Translation-en
Fetched 349 kB in 8s (41.8 kB/s)
Reading package lists...
W: The repository 'http://www.rabbitmq.com/debian testing Release' does not have a Release file.
W: The repository 'https://conversionupdates.paloaltonetworks.com expedition-updates/ Release' does not have a Release file.
W: The repository 'http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial Release' does not have a Release file.
E: Failed to fetch https://www.rabbitmq.com/debian/dists/testing/main/binary-amd64/Packages 404 OK
E: Failed to fetch http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu/dists/xenial/main/binary-amd64/Packages 403 Forbidden [IP: 91.189.95.85 80]
E: Some index files failed to download. They have been ignored, or old ones used instead.

expedition@Expedition:~$ sudo apt-get update | tee update.log
[sudo] password for expedition:
Hit:2 http://us.archive.ubuntu.com/ubuntu xenial InRelease
Get:3 http://us.archive.ubuntu.com/ubuntu xenial-updates InRelease [109 kB]
Hit:4 http://sgp1.mirrors.digitalocean.com/mariadb/repo/10.1/ubuntu xenial InRelease
Ign:1 https://www.rabbitmq.com/debian testing InRelease
Ign:6 https://conversionupdates.paloaltonetworks.com expedition-updates/ InRelease
Get:7 http://us.archive.ubuntu.com/ubuntu xenial-backports InRelease [107 kB]
Get:8 http://security.ubuntu.com/ubuntu xenial-security InRelease [109 kB]
Hit:9 http://ppa.launchpad.net/adiscon/v8-stable/ubuntu xenial InRelease
Ign:5 https://www.rabbitmq.com/debian testing Release
Ign:15 https://conversionupdates.paloaltonetworks.com expedition-updates/ Release
Ign:10 https://www.rabbitmq.com/debian testing/main amd64 Packages.diff/Index
Hit:16 http://ppa.launchpad.net/deadsnakes/ppa/ubuntu xenial InRelease
Ign:11 https://www.rabbitmq.com/debian testing/main i386 Packages.diff/Index
Ign:19 https://conversionupdates.paloaltonetworks.com expedition-updates/ Packages.diff/Index
Ign:20 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial InRelease
Ign:12 https://www.rabbitmq.com/debian testing/main all Packages
Ign:13 https://www.rabbitmq.com/debian testing/main Translation-en_US
Ign:21 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en_US
Get:22 http://ppa.launchpad.net/ondrej/apache2/ubuntu xenial InRelease [23.8 kB]
Ign:14 https://www.rabbitmq.com/debian testing/main Translation-en
Ign:23 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en
Ign:17 https://www.rabbitmq.com/debian testing/main amd64 Packages
Ign:18 https://www.rabbitmq.com/debian testing/main i386 Packages
Ign:24 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial Release
Ign:25 https://conversionupdates.paloaltonetworks.com expedition-updates/ Packages
Ign:12 https://www.rabbitmq.com/debian testing/main all Packages
Ign:26 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main amd64 Packages.diff/Index
Ign:21 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en_US
Ign:13 https://www.rabbitmq.com/debian testing/main Translation-en_US
Ign:27 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main i386 Packages.diff/Index
Ign:14 https://www.rabbitmq.com/debian testing/main Translation-en
Ign:23 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en
Ign:17 https://www.rabbitmq.com/debian testing/main amd64 Packages
Ign:28 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main all Packages
Ign:18 https://www.rabbitmq.com/debian testing/main i386 Packages
Ign:25 https://conversionupdates.paloaltonetworks.com expedition-updates/ Packages
Ign:12 https://www.rabbitmq.com/debian testing/main all Packages
Ign:29 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main Translation-en_US
Ign:13 https://www.rabbitmq.com/debian testing/main Translation-en_US
Ign:21 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en_US
Ign:14 https://www.rabbitmq.com/debian testing/main Translation-en

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!