Package update (webmin this time)

|------------------------------|-------------------------------|
| OS type and version | REQUIRED |
| Virtualmin version | REQUIRED |

SYSTEM INFORMATION
OS type and version Debian Linux 12
Webmin version 2.621
Usermin version 2.521
Virtualmin version 8.0.0 Professional
Theme version 26.22
Apache version 2.4.66
Package updates 1 package update is available

just gives me in Chrome

What chrome extensions do you have loaded?

1 Like

don’t really know - it is on Windows 11 System kept fully updated - it was reported to me by a client and I have just found the same.

It is not related to yesterday’s package problem which was more widespread (most of my other client’s on gpl have gone through webmin upgrade without any impact

Not run into this myself
Wonder if it Windows Defender?

2FAS Auth - Two Factor Authentication
Auto Follow Up for Gmail™ by cloudHQ
Better History | Manage, Export, and Delete History
CyberGhost Cookie Cleaner
Email Signature Generator by cloudHQ
Full Page Screenshot
Ghostery Tracker & Ad Blocker - Privacy AdBlock
Markdown Viewer
NaturalReader - AI Text to Speech
Python Code Runner
Octotree - GitHub code tree
Site Inspector
Tab Session Manager
TTS Ebook Reader
Voice In - Speech-To-Text Dictation

Update selected packages doesn’t leave your site does it? Not sure what Chrome is looking for. Does the update come down http?

Not like if you asked they would ever provide proof/details of the block if you asked.

1 Like

This has to do with the content on the website, nothing to do with virtualmin.
Could be false/positive, you need to check the content on the website for a hack.

Just remembered, I had a customer having the issue and the site was hacked and after removing the hack I went in my google search console and requested a review of the site. From memory (its been a few years) it didn’t take long for the bot to review and remove the issue.

I do not know where the problem was - we did nothing other than sleep on it and wait (PCs switched off and re-booted) :yawning_face:

this time loaded just fine by both client’s and my PC.


:+1:

1 Like

I’m going to guess one of those extensions is injecting something compromised into all sites you visit.

Refreshing packages simply loads a page on your server. Unless your server is detected as compromised, there’s no way for refreshing packages to cause that. When you’re loading Webmin/Virtualmin pages, they’re coming from your server.

reasonable guess - but not in this case!
the client’s PC cannot possibly have the same selection of extensions as my PC and on the day I turned a few of mine off to test just that - some are a bit aggressive.
there was no similar notice on any other site visited (the notice only came up when running the Virtualmin Pro upgrade through package manager)

As I had already performed the upgrade on other servers (GPL) without this problem https://forum.virtualmin.com/t/package-update-fails/136534 I was actually far more suspicious of Chrome or Microsoft than I was of Webmin.
who knows what upgrades there were on those overnight.

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.