Slashdot Mirror
Vulnerability Discovered In Latest Ubuntu Distributions, Users Advised To Update (ubuntu.com)
Celarent Darii writes: There is a vulnerability in the latest ubuntu distributions due to the DNS resolver included in systemd. The inclusion of the dns resolver was lamented by many on the mailing list, not without cause. All are advised to update their distribution.
Millions of Windows machines got hit yesterday with NotPetya, so this DNS vulnerability is proof that Linux is just as insecure because millions of Linux machines... didn't.
I had nothing but issues and uninstalled it and went back to dnsmasq... not a problem since. I wish they would just quit throwing the kitchen, bathroom, outside sinks into this mess.
No kidding. Do all of you folks see my amazed look? :/
B.t.w. does anybody know if systemd already ships its own OS?
Finally, the proof! When we arrest Linus, should it be the death sentence or just prison for life?
I think systemd is a Microsoft plant. It's basically INI files for Linux. Next week he'll upgrade us all to a 'central registry' and you'll need a GUI to edit it.
Custom electronics and digital signage for your business: www.evcircuits.com
Windows for life.
Too many people lie to hurt Linux because they're corporate shill or just simply hate freedom. The newest version of systemd that we make available for 14.40 is 229-4ubuntu17. This idiot lies and claims that 231-9ubuntu5 fixes the problem. That version does not exist. The attacks from people like Oracle and Microsoft are getting more desperate. Their constant spew of hate must be working because they're investing more money in paying these people to spew more lies.
PulseAudio is a flaky disaster as is the developer behind it. But systemd is scaled up full retard. Who, in their right mind, thinks, "Gee, I should plop my own homegrown DNS resolver into my system service startup tool. Nothing could go wrong with that." Let's forget that BIND went through many painful years of vulnerability management.
Systemd is just a piece of crap. It's slow, bloated, broken, and a security hole waiting to be exploited. I propose that all linux distros revert back to init.d and dispose of this garbage code at a microsoft coding camp.
Here goes: systemd, the cause of all modern Linux problems.
systemd is completely backward in how unix systems are built. You're supposed to have tiny programs do one job and do it well. systemd is a huge monolith that's assimilating everything on its path.
Wait, why does that sound familiar?
Anyone know if the authors of systemd are getting paid by Microsoft, by any chance?
#DeleteFacebook
What else can I look forward to if I download this update?
Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
Guess again. Ubuntu is the most popular Linux server distro.
http://www.serverwatch.com/col...
Won't get that past the 8th amendment.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
SystemD has 617 issues open and there is no sign of all issues being resolved this decade.
Anons need not reply. Questions end with a question mark.
fuck beta
When I read the story, I immediately thought "Half the comments will be about Petya, the other half will lament how systemd is the spawn of hell".
I was not disappointed.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
The problem isn't with Linux, it's with systemd. I do use a distro that unfortunately uses systemd. I was actually surprised at how fast systemd infected so many distributions when so many people seemed to complain about it. There seemed to be a lot of arguments over at Debian, so much that a group of those involved left to create a fork of Debian. I haven't had any problems with it yet, but I am wary of it, and how it goes against what Linux is.
A vulnerability is found, update your system. How is that news? That should just be common practice. When security updates are released for your OS, update it. This is not news. Vulnerabilities are found often in all OSes. And updates are released. Seems to me like the article is attempting to call out Ubuntu rather that actually inform and educate.
Sent from my TARDIS
I had already swapped systemd-resolved for dnsmasq because that works.
Ceci n'est pas une
the paradigm of the age is "we don't care what the users/customers/voters think, we're doing it anyway".
the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff
This bug affects 17.04 and 16.10, nothing critical should be running on non LTS releases anyway.
Fed up with systemd, Linus switched his home machine to freebsd last year.
Switch to slackware, devuan, gentoo...
After all Linux is still a few percentage of desktop, no need to install Debian derivative
We are competent admin, are we not ?
Yes, it is painful to see such a great distro being overtaken by such a crap software.
Live long and prosper
interestingly enough, everyone who argued against systemd has been validated. Systemd is a cancer and should be irradicated from all distributions. Systemd is an active effort to fuck over Linux to be more like Windows. As systemd continues to be used, Linux continues to become as broken, dysfunctional, and unsecure as Windows.
Only the dumb of the dumb actually champion systemd.
Finally, we may be seeing the year of the Linux Desktop... ...Malware.
"That's the way to do it" - Punch
Whenever I see one of these vulnerability notices, I always go to to check/update my system, and I always find that my system has installed the fix itself, automatically. Honestly, it's really quite impressive. Nothing like the proprietary worlds. Thanks, Ubuntu, Debian, and the systemd teams!
Shitstemd apologists are too stupid to understand that by reinventing all these wheels also means reinventing all the bugs that have been long encountered and fixed in mature and stable code that shitstemd the project wants to reinvent.
It doesn't matter if resolved is not part of the init, or not part of PID 1. It's part of the project and idiot maintainers are including it because they have zero clue about the software they're maintaining. They opted for systemd because unit files are easier to maintain than shell scripts. Fine. Then use JUST the init.
Why the fuck do you have to include everything else, Ubuntu maintainers? What was so damn wrong with all the tried and tested resolving functions that you had to replace it with this steaming turd written by windows noobs who had no money to get into development for Windows, so they opted to take this mentality into Linux.
You idiots think that the "systemd drama" has settled? Think twice. The crapfest and trainwreck has merely STARTED. Next: CVE of epic proportions that owned the entire systemd/linux ecosystem, brought down milions of webservers and ground the Internet to a halt.
Stallman? When you're done eating your toe jam, perhaps you could chime in and defend the GNUserland which is fading away.
If so, those guys introduced a bug into a working package.
If not, those guy introduced a buggy package in a working environment.
Blame those guys!
Sent as ripples into the electromagnetic field. No single photon has been harmed in the process.
And they don't just update willy-nilly to the latest distro. You update too quickly, you know you're really a canary in a cage. So the "solution" is to update again? I'd roll back to the previous version of whatever you were using and wait a bit.
But hey, useful fools and all that ...
"Transparent" is a shit show that trades on every stereotype going. A man in drag is NOT a transsexual.
I have seen many trolls in my lifetime, but I don't think I've ever seen one as sad and pathetic as this.
You must be new here.
"Transparent" is a shit show that trades on every stereotype going. A man in drag is NOT a transsexual.
There's all this whining about systemd and comparing it to Microsoft but comparing Redhat to Microsoft seems more appropriate, no?
The news is clear, Shill.
The news here is that systemd, in its usual 'we know better than anyone, even though we have very very little experience' way replaced perfectly functional systems for the most dubious of reasons (usually 'because we want to make them different, and cannot even be bothered raising our reasons with maintainers of existing solutions because then we may need to rationalise what we want'), and went away and implemented a system broken in a way SO foolish that the existing solutions have addressed exactly these issues decades ago.
Not to mention the fact that they have worked hard to try and make it unavoidable that ALL linux solutions will end up with the problems caused by their basic ignorance by making systemd basically indespensible.
Clear enough? Or perhaps you think a trivially exploitable and almost indefensible DNS bug, along with a file system wiping bug (the good old rm ../...) are just minor bumps on the road to nirvana?
Of course the clear and obvious REASON for systemd is a power grab by RedHat to give them control of the Linux 'standard'. It is unfortunate that they cannot see past their own grab at power to see how damaging such an approach is to the robustness of Linux itself -they must turn away, stick their fingers in their ears, and sing 'la la la la, wont happen to us, la la la la' loudly to themselves each time a big windows exploit drops these days.. Because that is the endpoint of the path they are following.
Talk about a "nothing burger" ... this is one!
The fix? Merely a standard "sudo apt upgrade & sudo apt full-upgrade", something most users of Ubuntu & its derivatives do with automatic updates.
Running with Linux for over 20 years!
Just be aware that if you're running a LTS version of Ubuntu, it doesn't have this vulnerability.
As per the linked article, this issue affects Ubuntu 17.04 & Ubuntu 16.10. The most recent LTS release is 16.04
Specialist Mac support for creative pros, Melbourne
Somebody explain to me please, how come that Lennart from RedHat _Desktop_ team, rules over everything?! I just don't get it.