Ars Technica posted an article describing the getaddrinfo() bug and how it is widespread in the Linux world.     The vulnerability was introduced in 2008 in GNU C Library, a collection of open   source code that powers thousands of standalone applications and most    distributions of Linux, including those distributed with routers and other    types of hardware.   Source:   Question: In which general distribution versions of Ubuntu has this bug been fully addressed/corrected?
7073
Today a couple of buffer overflows in NTP were announced , . It looks like updating my system to fix these issues is in order.   How can I find out if they have been fixed in the Ubuntu repositories, such that if I were to run:   sudo apt-get update sudo apt-get upgrade   then the fix would get installed and the vulnerability closed?   Edit: The selected answer specifically addresses the question of how to identify if a given CVE has been fixed or not, "Does Ubuntu generally post timely security updates?"  is certainly related but not identical
67585
The "" vulnerability in particular versions of OpenSSL is a serious security issue which allows malicious servers or clients to undetectably obtain unauthorized data from the other end of an SSL/TLS connection.  My Android device has a copy of OpenSSL installed in /system/lib. Its version number is 1.0.1c, which appears to make it vulnerable to this attack.  shell@vanquish:/ $ grep ^OpenSSL\  /system/lib/libssl.so                        OpenSSL 1.0.1c 10 May 2012    How does this affect me? Do Android apps use OpenSSL? If not, why is it there? Can I expect a firmware update from my carrier? If I root my phone, can I update it myself?
97800
When I run a process that links to a shared library at runtime (linked when the process starts, not linked later with dlload()), where does it look for that shared library (.so) file other than LD_LIBRARY_PATH?  Background:  I have some C++ code that I wrote that uses a particular third-party library. I have installed the library and compiled my code on two different platforms, both Ubuntu but different versions, and different versions of gcc as well. The library was compiled and installed from source, and is located in /usr/local/lib on both platforms. When I compile my code, I link with the pkg-config --libs parameters for the third-party library and I've verified that pkg-config --libs returns the exact same thing on both platforms.  My code compiles successfully on both platforms, and LD_LIBRARY_PATH is not defined (or defined as empty: "") on both platforms. However, when I run it on one platoform it works fine, and on the other I get this error:  error while loading shared libraries: libthrift-0.9.0.so: cannot open shared object file: No such file or directory   Funnily enough, the ones that doesn't work is the newer version of Ubuntu and gcc.  :/  So I'm trying to figure out how the working one is able to locate the library, so that I can make the broken one locate the library in the same way. (i.e., without setting LD_LIBRARY_PATH)  Update:  Here's my output from cat /etc/ld.so.conf.d/*  ...on the working (older) system:  /usr/lib/mesa /usr/lib32/mesa /usr/lib/alsa-lib # libc default configuration /usr/local/lib # Multiarch support /lib/x86_64-linux-gnu /usr/lib/x86_64-linux-gnu   ...on the broken (newer) system:  # libc default configuration /usr/local/lib # Multiarch support /lib/x86_64-linux-gnu /usr/lib/x86_64-linux-gnu /usr/lib/x86_64-linux-gnu/mesa
28400
Is there a command to list dns servers used by my system?  I tried   $ cat /etc/resolv.conf  # Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8) #     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN nameserver 127.0.0.1 $ cat /etc/network/interfaces  # interfaces(5) file used by ifup(8) and ifdown(8) auto lo iface lo inet loopback   But it doesn't list any servers, if I go to "Network Manager GUI Tool", in Wireless section it lists "DNS 192.168.1.1 8.8.8.8 8.8.4.4"  Can I get same information from command line?  I am using Ubuntu 12.04 LTS
105951
Utilities like host and dig let you see the IP address corresponding to the host name.  There is also the getent utility that can be used to query /etc/hosts or other NSS databases.  I am looking for a convenient standard utility (which is available in Debian, say) which resolves a host name regardless of where it is defined.  It should be more or less equivalent to  ping "$HOST" | head -1 | perl -lne '/\((.*?)\)/ &amp;&amp; print $1'
99303
I'm having an issue getting passed my corporate proxy server.  I had an exception put in place to allow my IP address to pass through, but haven't been able to get apt-get to work.  wget can get to the Ubuntu repos without any issues.  root@server:/tmp# http_proxy=http://&lt;PROXY&gt;:8080 wget http://us.archive.ubuntu.com/ubuntu/dists/precise-backports/multiverse/binary-i386/Packages.bz2 --2014-01-24 09:17:38--  http://us.archive.ubuntu.com/ubuntu/dists/precise-backports/multiverse/binary-i386/Packages.bz2 Resolving &lt;PROXY&gt; (&lt;PROXY&gt;)... x.x.x.25, x.x.x.24 Connecting to &lt;PROXY&gt; (&lt;PROXY&gt;)|x.x.x.25|:8080... connected. Proxy request sent, awaiting response... 200 OK Length: 5178 (5.1K) [application/x-bzip2] Saving to: `Packages.bz2'  100%[========================================&gt;] 5,178       --.-K/s   in 0.001s  2014-01-24 09:17:38 (7.78 MB/s) - `Packages.bz2' saved [5178/5178]  root@server:/tmp# ll -h total 16K drwxrwxrwt  2 root root 4.0K Jan 24 09:17 ./ drwxr-xr-x 23 root root 4.0K Jan 16 14:14 ../ -rw-r--r--  1 root root 5.1K Jan 24 09:05 Packages.bz2 root@server:/tmp#   I setup my apt-conf.d proxy configurations.  root@server:/tmp# cat /etc/apt/apt.conf.d/30proxy Acquire::http::proxy "http://&lt;PROXY&gt;:8080"; Acquire::ftp::proxy "ftp://&lt;PROXY&gt;:8080"; Acquire::https::proxy "https://&lt;PROXY&gt;:8080"; root@server:/tmp#   apt-get still fails with a 403  Forbidden error.  root@server:/tmp# apt-get update Ign http://us.archive.ubuntu.com precise Release.gpg &lt;...snipped excess...&gt; Ign http://us.archive.ubuntu.com precise-backports/universe TranslationIndex Err http://security.ubuntu.com precise-security/main Sources   403  Forbidden [IP: x.x.x.25 8080] &lt;...snipped excess...&gt; Err http://security.ubuntu.com precise-security/multiverse i386 Packages   403  Forbidden [IP: x.x.x.25 8080] W: Failed to fetch http://us.archive.ubuntu.com/ubuntu/dists/precise/main/source/Sources  403  Forbidden [IP: x.x.x.24 8080] &lt;...snipped excess...&gt; W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/precise-security/multiverse/binary-i386/Packages  403  Forbidden [IP: x.x.x.25 8080] E: Some index files failed to download. They have been ignored, or old ones used instead. root@server:/tmp#     PROXY replaces my proxy server's FQDN
85627
How do you find the default gateway of a routing table using C on Linux?  I don't want to issue a call to the shell or read a file.  There are ioctls for adding and deleteing routes (SIOCADDRT, SIOCDELRT) and I've found on reference to getting routes (SIOCGRTCONF) but it seems that the version of the kernel I'm using doesn't support SIOCGRTCONF.
15710
I saw several bugs and error messages when I was looking by chance into the tool called "logs".  Being a newbie in Ubuntu I have no idea how to deal with these bugs, where to report them or how to fix them.  Any help to guide me here?  The bug I have (which is listed under important) reads:  [Firmware Bug]: TSC_DEADLINE disabled due to Errata; please update microcode to version: 0x52 (or later)
28257
On AWS Ubuntu Server, I wrote C++ Hello, World program:  #include &lt;iostream&gt; using namespace std;  int main(){         cout&lt;&lt;"Hello, World!"&lt;&lt;endl;         return 0; }   And compiled it:  ubuntu@ip-xxxxx:~/dev/c++$ g++ -c ./test.cc -o out ubuntu@ip-xxxxx:~/dev/c++$ chmod a+x out ubuntu@ip-xxxxx:~/dev/c++$ ./out -bash: ./out: cannot execute binary file: Exec format error ubuntu@ip-xxxxx:~/dev/c++$ file ./out ./out: ELF 64-bit LSB  relocatable, x86-64, version 1 (SYSV), not stripped ubuntu@ip-xxxxx:~/dev/c++$ uname -a Linux ip-xxxxx 3.13.0-48-generic #80-Ubuntu SMP Thu Mar 12 11:16:15 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux ubuntu@ip-xxxxx:~/dev/c++$ gcc --version gcc (Ubuntu 4.8.4-2ubuntu1~14.04) 4.8.4   It seems that architecture x86-64 is the same each other. What is the problem here? Do I have to add more C++ flags?
6124
How can I find local IP addresses (i.e. 192.168.x.x or 10.0.x.x) in Python platform independently and using only the standard library?
109461
My internet connection used to be a direct LAN connection to my provider. Back then, everything would load fine on both Windows and Ubuntu (dual boot). However, a while ago they started needing me to dial (PPPoE) using a username and password. Gateway, subnet mask, IP, DNS servers all stayed the same. But since then, I haven't been able to browse certain websites on Ubuntu, even though there have been no such issues on Windows. Some example websites are -  (although share.ovi.com loads fine, and nokia.com loads fine),  (works on Chrome(ium) and Opera but not on Firefox (both 3.6 and 4)) Mozilla  and other random websites.  Some of the websites that don't load show timeout messages and for some websites (like the moz addons one), the browser will keep trying to load without an end (I've left it like that even for hours but not noticed anything different happen).  I have tried changing the DNS servers to public ones. I have even tried booting from a Fedora LiveCD and then changing the DNS to those (and even to the ones of OpenDNS), but the exact same thing happens. What could be inherently wrong with some config within Linux itself that is causing this problem?  Does anyone know why this is happening and how it can be fixed?  Note: This question has been  on SU, but not gotten any responses.  Update: Just saw  that someone else was having similar problem and solved it by putting a NetworkManager.conf file in /etc/NetworkManager. What needs to be in that file?
52584
System Details:  $ cat /etc/lsb-release DISTRIB_ID=Ubuntu DISTRIB_RELEASE=12.04 DISTRIB_CODENAME=precise DISTRIB_DESCRIPTION="Ubuntu 12.04.2 LTS"   $ g++ --version g++ (Ubuntu/Linaro 4.6.3-1ubuntu5) 4.6.3 Copyright (C) 2011 Free Software Foundation, Inc. This is free software; see the source for copying conditions.  There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
37244
I freshly installed Ubuntu 16.10 and rsync'd a backup of my previous home directory from kubuntu 16.04 to my new install. Things work well, but I have not been able to resolve local addresses despite much trial and error.  All networking seems to be working flawlessly. Internet browsing, DNS lookup of outside addresses, ssh, etc. are great. Locally, I can access machines via ssh with their addresses, but not their names. It all works fine in nautilus/samba, meaning WINS works. The single problem, it appears, is local network DNS. I have avahi-daemon installed and running, as it came with Ubuntu.  I've included some troubleshooting, using &lt;&lt;>> to shorten redundant or correctly working portions.  $ nmcli g STATE      CONNECTIVITY  WIFI-HW  WIFI     WWAN-HW  WWAN     connected  full          enabled  enabled  enabled  enabled   $ ping tendril8 &lt;&lt; or tendril8.local &gt;&gt; ping: tendril8: Name or service not known  $ ping gateway PING gateway (192.168.1.1) 56(84) bytes of data. 64 bytes from gateway (192.168.1.1): icmp_seq=1 ttl=64 time=4.16 ms  $ ping askubuntu.com PING askubuntu.com (151.101.129.69) 56(84) bytes of data. 64 bytes from 151.101.129.69 (151.101.129.69): icmp_seq=1 ttl=49 time=43.0 ms  $ nslookup askubuntu.com Server:     127.0.1.1 Address:    127.0.0.1#53 &lt;&lt; followed by several IP addresses &gt;&gt;  $ nslookup tendril8 &lt;&lt; or tendril8.local &gt;&gt; Server:     127.0.1.1 Address:    127.0.0.1#53 ** server can't find tendril8: NXDOMAIN  $ cat /etc/resolv.conf # Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8) #     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN nameserver 127.0.1.1  $ ls -la /etc/resolv.conf lrwxrwxrwx 1 root root 29 Oct 15 19:30 /etc/resolv.conf -&gt; ../run/resolvconf/resolv.conf  $ cat /etc/nsswitch.conf # /etc/nsswitch.conf # # Example configuration of GNU Name Service Switch functionality. # If you have the `glibc-doc-reference' and `info' packages installed, try: # `info libc "Name Service Switch"' for information about this file.  passwd:         compat group:          compat shadow:         compat gshadow:        files  hosts:          files resolve [!UNAVAIL=return] mdns4_minimal dns [NOTFOUND=return] networks:       files  protocols:      db files services:       db files ethers:         db files rpc:            db files  netgroup:       nis   Note: I've spent a great deal of time looking at "older" solutions, prior to Ubuntu switching to systemd.resolved in 16.10. They have not worked for me and I don't believe this to be a duplicate question to similar ones with prior Ubuntu configurations.
124112
Take the acroread or libpam-ldap packages as examples.  Even when installed with apt-get --force-yes they still ask questions:   acroread wants to know whether acrobat should be the standard PDF reader (how to assume yes?) libpam-ldap What's your LDAP-Servers URI, version, password, ...? (how to just assume anything, the ldap.conf will be overwritten by puppet anyway)   Is there a "for god's sake assume anything and stop nagging"-switch for apt-get?
82372
After the  and , now I've heard about a new vulnerability in SSL/TLS called . How do I protect myself against being exploited?   Are only servers or also clients affected? Is this OpenSSL/GnuTLS specific? What kind of services are affected? Only HTTPS or also IMAPS, SMTPS, OpenVPN, etc.?   Please show me examples on how to avoid this vulnerability.
16977
What is the best and most usable format to capture address information from a universal user base? I was thinking to have the system detect the country by IP address and have that selected by default, and then state/province droplist would be populated accordingly. But the issue is some countries have states and provinces and some do not. Some have postal codes and some do not. Is there a universal standard to capture complete address info to ensure efficiency for most users?  FYI: I did research on here and while there are some questions that are close, none are about this exact same question (unless I missed something)
109396
apt-get fail to resolve the mirror. I am using my server as a backup server to one of my website servers. So I had to initially set a static IP address... How can I do it?