[Bug 1328975] Re: libc6: getaddrinfo() sends DNS queries to random file descriptors

2015-09-11 Thread stevenschlansker
It looks like the bug may actually be fixed in trusty-security eglibc
2.19-0ubuntu6.6

eglibc (2.19-0ubuntu6.6) trusty-security; urgency=medium

  * SECURITY UPDATE: getaddrinfo writes to random file descriptors under
high load
- debian/patches/any/cvs-resolv-reuse-fd.diff: reload file descriptor
  after calling reopen in resolv/res_send.c.
- CVE-2013-7423

So this bug status is misleading; the issue should be fixed against
Trusty I believe.

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-7423

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1328975

Title:
  libc6: getaddrinfo() sends DNS queries to random file descriptors

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1328975/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1328975] Re: libc6: getaddrinfo() sends DNS queries to random file descriptors

2015-09-11 Thread stevenschlansker
Additionally, attempting to bring in utopic libc to fix the bug causes
dependency resolution problems down the road.  Both the trusty python3
and Xamarin Mono repositories then start to fail with messages like:

The following packages have unmet dependencies:
nuget : Depends: libnuget-core-cil (= 2.8.7+md510+dhx1-0xamarin1) but it is not 
going to be installed
Depends: libmono-corlib4.5-cil (>= 4.0.0~alpha1) but 3.2.8+dfsg-4ubuntu1 is to 
be installed
Depends: libmono-microsoft-build-framework4.0-cil (>= 3.6.0) but 
3.2.8+dfsg-4ubuntu1 is to be installed
Depends: libmono-microsoft-build4.0-cil (>= 3.6.0) but 3.2.8+dfsg-4ubuntu1 is 
to be installed
Depends: libmono-system-core4.0-cil (>= 4.0.0~alpha1) but 3.2.8+dfsg-4ubuntu1 
is to be installed
Depends: libmono-system4.0-cil (>= 4.0.0~alpha1) but 3.2.8+dfsg-4ubuntu1 is to 
be installed
[91mE: Unable to correct problems, you have held broken packages. [0m [91m

This is an extremely frustrating situation to be in, our application is
crashing almost daily due to this issue, and we seem to have no
supported path forward.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1328975

Title:
  libc6: getaddrinfo() sends DNS queries to random file descriptors

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1328975/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1328975] Re: libc6: getaddrinfo() sends DNS queries to random file descriptors

2015-09-08 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: eglibc (Ubuntu Trusty)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1328975

Title:
  libc6: getaddrinfo() sends DNS queries to random file descriptors

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1328975/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1328975] Re: libc6: getaddrinfo() sends DNS queries to random file descriptors

2015-09-08 Thread stevenschlansker
I too cannot understand why this fix was refused to backport to trusty.
We just spent two man-weeks tracking down this issue in one of our
applications, and to find that a severe race condition in libc was fixed
in Debian over a year ago but still not fixed in a *long term supported*
version of Ubuntu is ... frustrating, to put it lightly.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1328975

Title:
  libc6: getaddrinfo() sends DNS queries to random file descriptors

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1328975/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1328975] Re: libc6: getaddrinfo() sends DNS queries to random file descriptors

2015-01-20 Thread John Morales
Hi all-- I apologize in advance if this is tracked somewhere here and
I'm missing it, but I'm curious to know if this bugfix (and associated
downstream packages) are planned to be backported to 14.04 repositories.

Would someone mind shedding some light on the backport process/timeline
for LTS releases, and the status of this ticket in that regard?

Much thanks for your time!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1328975

Title:
  libc6: getaddrinfo() sends DNS queries to random file descriptors

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1328975/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1328975] Re: libc6: getaddrinfo() sends DNS queries to random file descriptors

2015-01-09 Thread John Morales
** Changed in: eglibc (Ubuntu Trusty)
   Status: Confirmed => New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1328975

Title:
  libc6: getaddrinfo() sends DNS queries to random file descriptors

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1328975/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1328975] Re: libc6: getaddrinfo() sends DNS queries to random file descriptors

2015-01-09 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: eglibc (Ubuntu Trusty)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1328975

Title:
  libc6: getaddrinfo() sends DNS queries to random file descriptors

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1328975/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1328975] Re: libc6: getaddrinfo() sends DNS queries to random file descriptors

2014-06-24 Thread Launchpad Bug Tracker
This bug was fixed in the package glibc - 2.19-4ubuntu1

---
glibc (2.19-4ubuntu1) utopic; urgency=medium

  * Merge with Debian unstable, switching us to glibc and fixing bugs:
- Fix invalid fd reuse while sending DNS queries (LP: #1328975)
- Avoid Freescale 8xx dcbz workaround on ppc64el (LP: #1333499)
- Remove wrong ibm long double assembly routines (LP: #1294588)
- Fix incorrect frexpl results with long doubles (LP: #1333506)
  * debian/patches/powerpc/local-tune-power8.diff: When configured for
--with-cpu=power7, adjust -mtune for power8 instead (LP: #1333524)

glibc (2.19-4) unstable; urgency=medium

  [ Aurelien Jarno ]
  * debian/debhelper.in/libc.{preinst,postrm,postinst}: correctly remove
old ld.so configuration if more than one libc6 package is installed
(multiarch case).  Closes: #752389, #752404.

  [ Samuel Thibault ]
  * patches/hurd-i386/tg-tls-threadvar.diff: Update to fix gcc-4.9 build.

  [ Adam Conrad ]
  * debian/control.in/main: glibc-source Conflics/Replaces eglibc-source.
  * debian/patches/powerpc/local-powerpc8xx-dcbz.diff: Restrict the trap
to 32-bit builds, since the Freescale 8xx CPUs aren't 64-bit capable.

glibc (2.19-3experimental0) experimental; urgency=medium

  [ Aurelien Jarno]
  * Switch back to glibc sources:
- debian/control.in/*: replace eglibc by glibc, update descriptions.
- rename debian/debhelper.in/eglibc-source.install into
  glibc-source.install.
- rename debian/debhelper.in/eglibc-source.lintian-overrides into
  glibc-source.lintian-overrides.
- rename debian/eglibc-source.filelist into glibc-source.filelist
- debian/copyright: update.
- debian/rules, debian/rules.d/*: replace eglibc by glibc.
- source/lintian-overrides: replace eglibc by glibc.
- debian/sysdeps/*: replace eglibc by glibc.
- debian/po/*: update using debconf-updatepo.
- debian/rules.d/tarball.mk: rewrite to generate the orig tarball and
  to fetch the branch updates through git.
- patches/any/submitted-nl_langinfo-static.diff: refresh.
- patches/any/submitted-ldsodefs_rtld_debug.diff: drop.
- patches/any/local-dynamic-resolvconf.diff: new patch from the eglibc
  tree to dynamically take into account changes in resolv.conf.
- patches/powerpc/local-powerpc8xx-dcbz.diff: new patch from the eglibc
  tree to workaround dcbz issues on PowerPC 8XX CPUs.
- patches/sh4/local-fpscr_values.diff: new patch from eglibc tree to
  export the ___fpscr_values symbol on SH4.
- patches/any/local-libpic.diff: new patch from eglibc tree to install
  *_pic.a files.
- patches/any/local-bootstrap-headers.diff: new patch from eglibc tree
  to ease header installation when bootstrapping.

eglibc (2.19-3) unstable; urgency=medium

  [ Aurelien Jarno ]
  * debian/control.in/libc: fix libtirpc1 breaks.  Closes: #751852.
  * debian/rules.d/build.mk: generate ld.so configuration file using
DEB_HOST_MULTIARCH instead of DEB_HOST_GNU_TYPE to have a stable
path even when the GNU triplet change.
  * debian/debhelper.in/libc.{preinst,postrm,postinst}: remove old
ld.so configuration file on hurd-i386, i386 and kfreebsd-i386.
  * debian/debhelper.in/libc.postinst: don't create/modify ld.so.conf,
but instead provide it as a conffile in libc-bin.  Closes: #737588.
  * debian/debhelper.in/libc.preinst: remove dead code.

eglibc (2.19-2) unstable; urgency=medium

  [ Adam Conrad ]
  * expected-results-aarch64-linux-gnu-libc: Ignore basic-test.out on
arm64 after assurance from upstream that this isn't a regression.

  [ Aurelien Jarno ]
  * Add support for mipsn32, mipsn32el, mips64 and mips64el, based on
patches from Eleanor Chen, Yunqiang Su and Sphinx Jiang.  Closes:
#715038.
- debian/control.in/main: bump build-depends on linux-libc-dev to (>=
  3.9). Do it for all architectures as this version is in Jessie for quite
  some time.
- control.in/mips32: new file.
- control.in/mipsn32: add mips64 and mips64el architectures.
- control.in/mips64: add mipsn32 and mipsn32el architectures.
- debian/rules.d/control.mk: add mipsn32, mipsn32el, mips64 and mips64el
  to the architecture list.
- debian/sysdeps/mips64.mk: new file.
- debian/sysdeps/mips64el.mk: new file.
- debian/sysdeps/mipsn32.mk: new file.
- debian/sysdeps/mipsn32el.mk: new file.
  * debian/control.in/libc: add a Breaks: check (<< 0.9.10-6.1+b1) on s390x,
to make sure libcheck.a is using the GLIBC_2.19 version of the *jmp*
functions.
  * debian/control.in/libc: add a Breaks: libtirpc1 (<< 0.2.3), as earlier
versions try to unlock a lock which hasn't been locked, causing an
issue with lock elision.  Closes: #751134.
  * Update Swedish debconf translation, by Martin Bagge.  Closes: #751172.
  * debian/patches/alpha/submitted-lll_futex_timed_wait_bitset.diff: new
patch to fix issues in the testsuite on alpha.  Closes: #750996.
  * debian/tests

[Bug 1328975] Re: libc6: getaddrinfo() sends DNS queries to random file descriptors

2014-06-24 Thread Launchpad Bug Tracker
** Branch linked: lp:~ubuntu-branches/ubuntu/utopic/glibc/utopic-
proposed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1328975

Title:
  libc6: getaddrinfo() sends DNS queries to random file descriptors

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1328975/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1328975] Re: libc6: getaddrinfo() sends DNS queries to random file descriptors

2014-06-24 Thread Adam Conrad
** Changed in: glibc (Ubuntu)
 Assignee: (unassigned) => Adam Conrad (adconrad)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1328975

Title:
  libc6: getaddrinfo() sends DNS queries to random file descriptors

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1328975/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1328975] Re: libc6: getaddrinfo() sends DNS queries to random file descriptors

2014-06-23 Thread Adam Conrad
** Also affects: glibc (Ubuntu)
   Importance: Undecided
   Status: New

** Changed in: eglibc (Ubuntu)
   Status: New => Invalid

** Changed in: glibc (Ubuntu Trusty)
   Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1328975

Title:
  libc6: getaddrinfo() sends DNS queries to random file descriptors

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1328975/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1328975] Re: libc6: getaddrinfo() sends DNS queries to random file descriptors

2014-06-19 Thread Adam Conrad
** Also affects: eglibc (Ubuntu Trusty)
   Importance: Undecided
   Status: New

** Changed in: eglibc (Ubuntu Trusty)
 Assignee: (unassigned) => Adam Conrad (adconrad)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1328975

Title:
  libc6: getaddrinfo() sends DNS queries to random file descriptors

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1328975/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs