Question about the nightly security scan email

[sn2018]

My NextCloudPi 18 generates a security scan email at 2 AM every day. The subject line of the email is “Debian security status of ” and the body starts with

Security report based on the buster release

*** New security updates

CVE-2018-12207 Improper invalidation for page table updates by a…
https://security-tracker.debian.org/tracker/CVE-2018-12207

• linux-libc-dev

CVE-2018-20836 An issue was discovered in the Linux kernel before…
https://security-tracker.debian.org/tracker/CVE-2018-20836

• linux-libc-dev

CVE-2018-20852 http.cookiejar.DefaultPolicy.domain_return_ok in…
https://security-tracker.debian.org/tracker/CVE-2018-20852

• libpython2.7, libpython2.7-minimal, libpython2.7-stdlib, python2.7,
  python2.7-minimal

CVE-2018-21029 ** DISPUTED ** systemd 239 through 244 accepts any…
https://security-tracker.debian.org/tracker/CVE-2018-21029

• libpam-systemd, libsystemd0, libudev1, systemd, systemd-sysv, udev
  (low urgency)

CVE-2019-0136 Insufficient access control in the Intel(R)…
https://security-tracker.debian.org/tracker/CVE-2019-0136

• linux-libc-dev

CVE-2019-0154 Insufficient access control in subsystem for Intel…
https://security-tracker.debian.org/tracker/CVE-2019-0154

• linux-libc-dev

The questions I have are:

1. Are these critical issues?
2. Can I do something to eliminate them?
3. If not, how can I disable the email from being generated?

[superma]

Hallo beisammen,

ich habe eine Frische NextcloudPI installation, und bekomme diese E-Mail auch?

Gibt es hier keinen, der eine Aussage treffen kann?

Danke

Superma

[tflidd]

I don’t know what service runs these checks. I’d first check, if my system is up to date.

You want to do the unattended upgrades:

Staying up to date

[image] It is wise to keep your NCP instance up to date. We’ll explore the update options available from either: ncp-web on port :4443 ncp-config from the command line (cli) / Terminal-UI (TUI). Keep in mind that there are 4 separate parts of NextcloudPi that need updates; Debian (or Raspbian, etc.) - unattended-upgrades NextCloudPi - nc-update-ncp Nextcloud - nc-update-nc Appstore Apps - nc-update-nc-apps What needs updating? Debian Nextcloud NextcloudPi Appstore…

If that is the case and there are still the mails, then you probably need to trigger a rescan of this security utility.

[OliverV]

@sn2018

• Are these critical issues?
• Can I do something to eliminate them?
• If not, how can I disable the email from being generated?

1. No they are not
2. Yes, can remove the script from cron, but not advisable.
3. Disable by commenting out the MAILTO=root from de the cron job (Add a # at start of the line)

~ $ nano /etc/cron.d/debsecan
‘# cron entry for debsecan’
‘# MAILTO=root’