New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade apt without following redirects on first install, fix CVE-2019-3462 #4061

Merged
merged 4 commits into from Jan 24, 2019

Conversation

Projects
None yet
4 participants
@emkll
Copy link
Contributor

emkll commented Jan 23, 2019

Status

Ready for review

Description of Changes

Fixes #4058 .

Changes proposed in this pull request:

Testing

Install logic

  • Initial apt update uses the correct flags that mitigate the vulnerability [0]
  • The install completes without error
  • This also works in Xenial: `molecule converge -s {libvirt,virtualbox}-staging-xenial

Container updates

  • The trusty-based builder container contains an updated apt package and the upstream hash is valid.
  • The xenial-based dev container contains an updated apt package and the upstream hash is valid.
  • The trusty-based dev container contains an updated apt package and the upstream hash is valid.
  • The stretch-based admin container contains an updated apt package and the upstream hash is valid.
  • The trusy-based dev container was uploaded to container registry.

Deployment

Existing installs

Existing installs have already been updated using cron-apt

New installs

This PR should fix the issue for new installs. Since Ubuntu ISOs will not contain the apt fixes, we change the install logic to update apt before performing any type of other apt operations

Checklist

If you made changes to securedrop-admin:

  • Linting and tests (make -C admin test) pass in the admin development container

If you made changes to the system configuration:

If you made non-trivial code changes:

  • I have written a test plan and validated it for this PR

[0] https://justi.cz/security/2019/01/22/apt-rce.html

emkll added some commits Jan 23, 2019

Fix for CVE-2019-3462
Upgrade apt without following redirects in order to mitigate the apt RCE vulnerability at install time.
Install-fpf-repo is the first role using apt called during the install process.
Fix for CVE-2019-3462 for Docker images
Use upstream images that contain a fix to the apt vulnerability

@emkll emkll force-pushed the fix-cve-2019-3462 branch from 372c05a to 7206c92 Jan 23, 2019

@redshiftzero
Copy link
Member

redshiftzero left a comment

Confirmed via apt-cache policy apt that versions of apt installed in the following environments are not vulnerable to CVE-2019-3462:

1.0.1ubuntu2.19 is installed on trusty staging VMs, and the trusty-based dev container and the builder container
1.2.29ubuntu0.1 is installed for the xenial dev container and xenial staging VMs
1.4.9 is installed in the admin container

Additionally:

fresh install on trusty and xenial staging VMs occurs without issue
apt options specified in the added Ansible task mitigate the vuln

Update builder hash
Pushed a new builder image to registry that is now based on upsteam trusty image that contains fixes for CVE-2019-3462
@kushaldas
Copy link
Contributor

kushaldas left a comment

Install logic

  • Initial apt update uses the correct flags that mitigate the vulnerability [0]
  • The install completes without error
  • This also works in Xenial: `molecule converge -s {libvirt,virtualbox}-staging-xenial

Container updates

  • The trusty-based builder container contains an updated apt package and the upstream hash is valid.
  • The xenial-based dev container contains an updated apt package and the upstream hash is valid.
  • The trusty-based dev container contains an updated apt package and the upstream hash is valid.
  • The stretch-based admin container contains an updated apt package and the upstream hash is valid.
  • The trusy-based dev container was uploaded to container registry.
# redirects are followed when updating apt via apt.
- name: Upgrade apt without following redirects
shell : |
apt -o Acquire::http::AllowRedirect=false update

This comment has been minimized.

@heartsucker

heartsucker Jan 24, 2019

Contributor

Is there a reason we don't "fail fast" by using set -e or && here so that if the update fails, we don't even attempt the latter steps?

This comment has been minimized.

@emkll

emkll Jan 24, 2019

Author Contributor

good point, added &&

@heartsucker

This comment has been minimized.

Copy link
Contributor

heartsucker commented Jan 24, 2019

This task may fail if the servers are behind some kind of corporate proxy that attempts to redirect traffic to local mirrors. I just attempted this at a cafe with a captive portal and got the following errors.

TASK [install-fpf-repo : Upgrade apt without following redirects] **************
ok: [app-prod] => {"changed": false, "cmd": "apt -o Acquire::http::AllowRedirect=false update\n apt -o Acquire::http::AllowRedirect=false --only-upgrade -y install apt", "delta": "0:00:46.532230", "end": "2019-01-24 15:09:57.862716", "rc": 0, "start": "2019-01-24 15:09:11.330486", "stderr": "\nWARNING: apt does not have a stable CLI interface yet. Use with caution in scripts.\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/main/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/restricted/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/universe/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/multiverse/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/main/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/main/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/restricted/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/restricted/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/universe/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/universe/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/multiverse/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/main/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/main/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/restricted/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/restricted/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/universe/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/universe/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/multiverse/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/main/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/restricted/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/universe/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/multiverse/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/restricted/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/multiverse/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/restricted/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/restricted/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/multiverse/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/main/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/restricted/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/universe/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/multiverse/source/Sources  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/main/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/restricted/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/universe/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/main/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/restricted/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/universe/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/multiverse/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]\n\nE: Some index files failed to download. They have been ignored, or old ones used instead.\n\nWARNING: apt does not have a stable CLI interface yet. Use with caution in scripts.", "stderr_lines": ["", "WARNING: apt does not have a stable CLI interface yet. Use with caution in scripts.", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/main/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/restricted/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/universe/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/multiverse/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/main/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/main/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/restricted/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/restricted/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/universe/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/universe/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/multiverse/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/main/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/main/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/restricted/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/restricted/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/universe/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/universe/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/multiverse/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/main/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/restricted/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/universe/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/multiverse/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/restricted/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/multiverse/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/restricted/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/restricted/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/multiverse/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/main/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/restricted/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/universe/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/multiverse/source/Sources  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/main/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/restricted/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/universe/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/main/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/restricted/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/universe/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/multiverse/binary-i386/Packages  302  Found [IP: 91.189.88.152 80]", "", "E: Some index files failed to download. They have been ignored, or old ones used instead.", "", "WARNING: apt does not have a stable CLI interface yet. Use with caution in scripts."], "stdout": "Ign http://archive.ubuntu.com trusty InRelease\nIgn http://archive.ubuntu.com trusty-updates InRelease\nIgn http://archive.ubuntu.com trusty-backports InRelease\nIgn http://security.ubuntu.com trusty-security InRelease\nIgn http://archive.ubuntu.com trusty Release.gpg\nIgn http://security.ubuntu.com trusty-security Release.gpg\nIgn http://archive.ubuntu.com trusty-updates Release.gpg\nIgn http://security.ubuntu.com trusty-security Release\nIgn http://archive.ubuntu.com trusty-backports Release.gpg\nIgn http://security.ubuntu.com trusty-security/main Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty Release\nIgn http://security.ubuntu.com trusty-security/restricted Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates Release\nIgn http://security.ubuntu.com trusty-security/universe Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports Release\nIgn http://security.ubuntu.com trusty-security/multiverse Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty/main Sources/DiffIndex\nIgn http://security.ubuntu.com trusty-security/main amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/restricted Sources/DiffIndex\nIgn http://security.ubuntu.com trusty-security/restricted amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/universe Sources/DiffIndex\nIgn http://security.ubuntu.com trusty-security/universe amd64 Packages/DiffIndex\nIgn http://security.ubuntu.com trusty-security/multiverse amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/multiverse Sources/DiffIndex\nIgn http://security.ubuntu.com trusty-security/main i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/main amd64 Packages/DiffIndex\nIgn http://security.ubuntu.com trusty-security/restricted i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/restricted amd64 Packages/DiffIndex\nIgn http://security.ubuntu.com trusty-security/universe i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/universe amd64 Packages/DiffIndex\nIgn http://security.ubuntu.com trusty-security/multiverse i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/multiverse amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/main i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/restricted i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/universe i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/multiverse i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/main Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/restricted Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/universe Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/multiverse Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/main amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/restricted amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/universe amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/multiverse amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/main i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/restricted i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/universe i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/multiverse i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/main Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/restricted Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/universe Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/multiverse Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/main amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/restricted amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/universe amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/multiverse amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/main i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/restricted i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/universe i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/multiverse i386 Packages/DiffIndex\nIgn http://security.ubuntu.com trusty-security/main Translation-en_US\nIgn http://security.ubuntu.com trusty-security/main Translation-en\nIgn http://security.ubuntu.com trusty-security/multiverse Translation-en_US\nIgn http://security.ubuntu.com trusty-security/multiverse Translation-en\nIgn http://security.ubuntu.com trusty-security/restricted Translation-en_US\nIgn http://security.ubuntu.com trusty-security/restricted Translation-en\nIgn http://security.ubuntu.com trusty-security/universe Translation-en_US\nIgn http://security.ubuntu.com trusty-security/universe Translation-en\nErr http://security.ubuntu.com trusty-security/main Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://security.ubuntu.com trusty-security/restricted Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://security.ubuntu.com trusty-security/universe Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://security.ubuntu.com trusty-security/multiverse Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://security.ubuntu.com trusty-security/main amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://security.ubuntu.com trusty-security/restricted amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://security.ubuntu.com trusty-security/universe amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://security.ubuntu.com trusty-security/multiverse amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://security.ubuntu.com trusty-security/main i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://security.ubuntu.com trusty-security/restricted i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://security.ubuntu.com trusty-security/universe i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://security.ubuntu.com trusty-security/multiverse i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nIgn http://archive.ubuntu.com trusty/main Translation-en_US\nIgn http://archive.ubuntu.com trusty/main Translation-en\nIgn http://archive.ubuntu.com trusty/multiverse Translation-en_US\nIgn http://archive.ubuntu.com trusty/multiverse Translation-en\nIgn http://archive.ubuntu.com trusty/restricted Translation-en_US\nIgn http://archive.ubuntu.com trusty/restricted Translation-en\nIgn http://archive.ubuntu.com trusty/universe Translation-en_US\nIgn http://archive.ubuntu.com trusty/universe Translation-en\nIgn http://archive.ubuntu.com trusty-updates/main Translation-en_US\nIgn http://archive.ubuntu.com trusty-updates/main Translation-en\nIgn http://archive.ubuntu.com trusty-updates/multiverse Translation-en_US\nIgn http://archive.ubuntu.com trusty-updates/multiverse Translation-en\nIgn http://archive.ubuntu.com trusty-updates/restricted Translation-en_US\nIgn http://archive.ubuntu.com trusty-updates/restricted Translation-en\nIgn http://archive.ubuntu.com trusty-updates/universe Translation-en_US\nIgn http://archive.ubuntu.com trusty-updates/universe Translation-en\nIgn http://archive.ubuntu.com trusty-backports/main Translation-en_US\nIgn http://archive.ubuntu.com trusty-backports/main Translation-en\nIgn http://archive.ubuntu.com trusty-backports/multiverse Translation-en_US\nIgn http://archive.ubuntu.com trusty-backports/multiverse Translation-en\nIgn http://archive.ubuntu.com trusty-backports/restricted Translation-en_US\nIgn http://archive.ubuntu.com trusty-backports/restricted Translation-en\nIgn http://archive.ubuntu.com trusty-backports/universe Translation-en_US\nIgn http://archive.ubuntu.com trusty-backports/universe Translation-en\nErr http://archive.ubuntu.com trusty/main Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty/restricted Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty/universe Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty/multiverse Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty/main amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty/restricted amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty/universe amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty/multiverse amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty/main i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty/restricted i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty/universe i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty/multiverse i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-updates/main Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-updates/restricted Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-updates/universe Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-updates/multiverse Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-updates/main amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-updates/restricted amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-updates/universe amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-updates/multiverse amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-updates/main i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-updates/restricted i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-updates/universe i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-updates/multiverse i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-backports/main Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-backports/restricted Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-backports/universe Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-backports/multiverse Sources\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-backports/main amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-backports/restricted amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-backports/universe amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-backports/multiverse amd64 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-backports/main i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-backports/restricted i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-backports/universe i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nErr http://archive.ubuntu.com trusty-backports/multiverse i386 Packages\n  302  Found [IP: 91.189.88.152 80]\nReading package lists...\nBuilding dependency tree...\nReading state information...\napt is already the newest version.\n0 upgraded, 0 newly installed, 0 to remove and 2 not upgraded.", "stdout_lines": ["Ign http://archive.ubuntu.com trusty InRelease", "Ign http://archive.ubuntu.com trusty-updates InRelease", "Ign http://archive.ubuntu.com trusty-backports InRelease", "Ign http://security.ubuntu.com trusty-security InRelease", "Ign http://archive.ubuntu.com trusty Release.gpg", "Ign http://security.ubuntu.com trusty-security Release.gpg", "Ign http://archive.ubuntu.com trusty-updates Release.gpg", "Ign http://security.ubuntu.com trusty-security Release", "Ign http://archive.ubuntu.com trusty-backports Release.gpg", "Ign http://security.ubuntu.com trusty-security/main Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty Release", "Ign http://security.ubuntu.com trusty-security/restricted Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates Release", "Ign http://security.ubuntu.com trusty-security/universe Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports Release", "Ign http://security.ubuntu.com trusty-security/multiverse Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty/main Sources/DiffIndex", "Ign http://security.ubuntu.com trusty-security/main amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/restricted Sources/DiffIndex", "Ign http://security.ubuntu.com trusty-security/restricted amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/universe Sources/DiffIndex", "Ign http://security.ubuntu.com trusty-security/universe amd64 Packages/DiffIndex", "Ign http://security.ubuntu.com trusty-security/multiverse amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/multiverse Sources/DiffIndex", "Ign http://security.ubuntu.com trusty-security/main i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/main amd64 Packages/DiffIndex", "Ign http://security.ubuntu.com trusty-security/restricted i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/restricted amd64 Packages/DiffIndex", "Ign http://security.ubuntu.com trusty-security/universe i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/universe amd64 Packages/DiffIndex", "Ign http://security.ubuntu.com trusty-security/multiverse i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/multiverse amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/main i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/restricted i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/universe i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/multiverse i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/main Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/restricted Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/universe Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/multiverse Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/main amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/restricted amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/universe amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/multiverse amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/main i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/restricted i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/universe i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/multiverse i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/main Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/restricted Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/universe Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/multiverse Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/main amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/restricted amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/universe amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/multiverse amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/main i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/restricted i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/universe i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/multiverse i386 Packages/DiffIndex", "Ign http://security.ubuntu.com trusty-security/main Translation-en_US", "Ign http://security.ubuntu.com trusty-security/main Translation-en", "Ign http://security.ubuntu.com trusty-security/multiverse Translation-en_US", "Ign http://security.ubuntu.com trusty-security/multiverse Translation-en", "Ign http://security.ubuntu.com trusty-security/restricted Translation-en_US", "Ign http://security.ubuntu.com trusty-security/restricted Translation-en", "Ign http://security.ubuntu.com trusty-security/universe Translation-en_US", "Ign http://security.ubuntu.com trusty-security/universe Translation-en", "Err http://security.ubuntu.com trusty-security/main Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://security.ubuntu.com trusty-security/restricted Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://security.ubuntu.com trusty-security/universe Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://security.ubuntu.com trusty-security/multiverse Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://security.ubuntu.com trusty-security/main amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://security.ubuntu.com trusty-security/restricted amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://security.ubuntu.com trusty-security/universe amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://security.ubuntu.com trusty-security/multiverse amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://security.ubuntu.com trusty-security/main i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://security.ubuntu.com trusty-security/restricted i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://security.ubuntu.com trusty-security/universe i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://security.ubuntu.com trusty-security/multiverse i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Ign http://archive.ubuntu.com trusty/main Translation-en_US", "Ign http://archive.ubuntu.com trusty/main Translation-en", "Ign http://archive.ubuntu.com trusty/multiverse Translation-en_US", "Ign http://archive.ubuntu.com trusty/multiverse Translation-en", "Ign http://archive.ubuntu.com trusty/restricted Translation-en_US", "Ign http://archive.ubuntu.com trusty/restricted Translation-en", "Ign http://archive.ubuntu.com trusty/universe Translation-en_US", "Ign http://archive.ubuntu.com trusty/universe Translation-en", "Ign http://archive.ubuntu.com trusty-updates/main Translation-en_US", "Ign http://archive.ubuntu.com trusty-updates/main Translation-en", "Ign http://archive.ubuntu.com trusty-updates/multiverse Translation-en_US", "Ign http://archive.ubuntu.com trusty-updates/multiverse Translation-en", "Ign http://archive.ubuntu.com trusty-updates/restricted Translation-en_US", "Ign http://archive.ubuntu.com trusty-updates/restricted Translation-en", "Ign http://archive.ubuntu.com trusty-updates/universe Translation-en_US", "Ign http://archive.ubuntu.com trusty-updates/universe Translation-en", "Ign http://archive.ubuntu.com trusty-backports/main Translation-en_US", "Ign http://archive.ubuntu.com trusty-backports/main Translation-en", "Ign http://archive.ubuntu.com trusty-backports/multiverse Translation-en_US", "Ign http://archive.ubuntu.com trusty-backports/multiverse Translation-en", "Ign http://archive.ubuntu.com trusty-backports/restricted Translation-en_US", "Ign http://archive.ubuntu.com trusty-backports/restricted Translation-en", "Ign http://archive.ubuntu.com trusty-backports/universe Translation-en_US", "Ign http://archive.ubuntu.com trusty-backports/universe Translation-en", "Err http://archive.ubuntu.com trusty/main Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty/restricted Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty/universe Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty/multiverse Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty/main amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty/restricted amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty/universe amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty/multiverse amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty/main i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty/restricted i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty/universe i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty/multiverse i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-updates/main Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-updates/restricted Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-updates/universe Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-updates/multiverse Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-updates/main amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-updates/restricted amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-updates/universe amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-updates/multiverse amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-updates/main i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-updates/restricted i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-updates/universe i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-updates/multiverse i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-backports/main Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-backports/restricted Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-backports/universe Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-backports/multiverse Sources", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-backports/main amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-backports/restricted amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-backports/universe amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-backports/multiverse amd64 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-backports/main i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-backports/restricted i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-backports/universe i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Err http://archive.ubuntu.com trusty-backports/multiverse i386 Packages", "  302  Found [IP: 91.189.88.152 80]", "Reading package lists...", "Building dependency tree...", "Reading state information...", "apt is already the newest version.", "0 upgraded, 0 newly installed, 0 to remove and 2 not upgraded."]}
ok: [mon-prod] => {"changed": false, "cmd": "apt -o Acquire::http::AllowRedirect=false update\n apt -o Acquire::http::AllowRedirect=false --only-upgrade -y install apt", "delta": "0:00:46.530525", "end": "2019-01-24 15:09:57.867975", "rc": 0, "start": "2019-01-24 15:09:11.337450", "stderr": "\nWARNING: apt does not have a stable CLI interface yet. Use with caution in scripts.\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/main/source/Sources  302  Found [IP: 91.189.91.23 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/restricted/source/Sources  302  Found [IP: 91.189.91.23 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/universe/source/Sources  302  Found [IP: 91.189.91.23 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/main/source/Sources  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/multiverse/source/Sources  302  Found [IP: 91.189.91.23 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/restricted/source/Sources  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/main/binary-amd64/Packages  302  Found [IP: 91.189.91.23 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/universe/source/Sources  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/restricted/binary-amd64/Packages  302  Found [IP: 91.189.91.23 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/multiverse/source/Sources  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/universe/binary-amd64/Packages  302  Found [IP: 91.189.91.23 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/main/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.91.23 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/restricted/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/main/binary-i386/Packages  302  Found [IP: 91.189.91.23 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/universe/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/restricted/binary-i386/Packages  302  Found [IP: 91.189.91.23 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/universe/binary-i386/Packages  302  Found [IP: 91.189.91.23 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/multiverse/binary-i386/Packages  302  Found [IP: 91.189.91.23 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/main/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/restricted/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/universe/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/multiverse/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/source/Sources  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/restricted/source/Sources  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/source/Sources  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/multiverse/source/Sources  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/restricted/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/restricted/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/multiverse/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/main/source/Sources  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/restricted/source/Sources  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/universe/source/Sources  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/multiverse/source/Sources  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/main/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/restricted/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/universe/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/main/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/restricted/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/universe/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]\n\nW: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/multiverse/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]\n\nE: Some index files failed to download. They have been ignored, or old ones used instead.\n\nWARNING: apt does not have a stable CLI interface yet. Use with caution in scripts.", "stderr_lines": ["", "WARNING: apt does not have a stable CLI interface yet. Use with caution in scripts.", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/main/source/Sources  302  Found [IP: 91.189.91.23 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/restricted/source/Sources  302  Found [IP: 91.189.91.23 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/universe/source/Sources  302  Found [IP: 91.189.91.23 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/main/source/Sources  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/multiverse/source/Sources  302  Found [IP: 91.189.91.23 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/restricted/source/Sources  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/main/binary-amd64/Packages  302  Found [IP: 91.189.91.23 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/universe/source/Sources  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/restricted/binary-amd64/Packages  302  Found [IP: 91.189.91.23 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/multiverse/source/Sources  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/universe/binary-amd64/Packages  302  Found [IP: 91.189.91.23 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/main/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.91.23 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/restricted/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/main/binary-i386/Packages  302  Found [IP: 91.189.91.23 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/universe/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/restricted/binary-i386/Packages  302  Found [IP: 91.189.91.23 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/universe/binary-i386/Packages  302  Found [IP: 91.189.91.23 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/trusty-security/multiverse/binary-i386/Packages  302  Found [IP: 91.189.91.23 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/main/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/restricted/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/universe/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/multiverse/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/source/Sources  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/restricted/source/Sources  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/source/Sources  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/multiverse/source/Sources  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/restricted/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/restricted/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-updates/multiverse/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/main/source/Sources  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/restricted/source/Sources  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/universe/source/Sources  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/multiverse/source/Sources  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/main/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/restricted/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/universe/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/multiverse/binary-amd64/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/main/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/restricted/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/universe/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]", "", "W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty-backports/multiverse/binary-i386/Packages  302  Found [IP: 91.189.88.161 80]", "", "E: Some index files failed to download. They have been ignored, or old ones used instead.", "", "WARNING: apt does not have a stable CLI interface yet. Use with caution in scripts."], "stdout": "Ign http://archive.ubuntu.com trusty InRelease\nIgn http://archive.ubuntu.com trusty-updates InRelease\nIgn http://archive.ubuntu.com trusty-backports InRelease\nIgn http://archive.ubuntu.com trusty Release.gpg\nIgn http://security.ubuntu.com trusty-security InRelease\nIgn http://archive.ubuntu.com trusty-updates Release.gpg\nIgn http://security.ubuntu.com trusty-security Release.gpg\nIgn http://archive.ubuntu.com trusty-backports Release.gpg\nIgn http://security.ubuntu.com trusty-security Release\nIgn http://archive.ubuntu.com trusty Release\nIgn http://security.ubuntu.com trusty-security/main Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates Release\nIgn http://security.ubuntu.com trusty-security/restricted Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports Release\nIgn http://security.ubuntu.com trusty-security/universe Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty/main Sources/DiffIndex\nIgn http://security.ubuntu.com trusty-security/multiverse Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty/restricted Sources/DiffIndex\nIgn http://security.ubuntu.com trusty-security/main amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/universe Sources/DiffIndex\nIgn http://security.ubuntu.com trusty-security/restricted amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/multiverse Sources/DiffIndex\nIgn http://security.ubuntu.com trusty-security/universe amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/main amd64 Packages/DiffIndex\nIgn http://security.ubuntu.com trusty-security/multiverse amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/restricted amd64 Packages/DiffIndex\nIgn http://security.ubuntu.com trusty-security/main i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/universe amd64 Packages/DiffIndex\nIgn http://security.ubuntu.com trusty-security/restricted i386 Packages/DiffIndex\nIgn http://security.ubuntu.com trusty-security/universe i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/multiverse amd64 Packages/DiffIndex\nIgn http://security.ubuntu.com trusty-security/multiverse i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/main i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/restricted i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/universe i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty/multiverse i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/main Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/restricted Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/universe Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/multiverse Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/main amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/restricted amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/universe amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/multiverse amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/main i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/restricted i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/universe i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-updates/multiverse i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/main Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/restricted Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/universe Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/multiverse Sources/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/main amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/restricted amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/universe amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/multiverse amd64 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/main i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/restricted i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/universe i386 Packages/DiffIndex\nIgn http://archive.ubuntu.com trusty-backports/multiverse i386 Packages/DiffIndex\nIgn http://security.ubuntu.com trusty-security/main Translation-en_US\nIgn http://security.ubuntu.com trusty-security/main Translation-en\nIgn http://security.ubuntu.com trusty-security/multiverse Translation-en_US\nIgn http://security.ubuntu.com trusty-security/multiverse Translation-en\nIgn http://security.ubuntu.com trusty-security/restricted Translation-en_US\nIgn http://security.ubuntu.com trusty-security/restricted Translation-en\nIgn http://security.ubuntu.com trusty-security/universe Translation-en_US\nIgn http://security.ubuntu.com trusty-security/universe Translation-en\nErr http://security.ubuntu.com trusty-security/main Sources\n  302  Found [IP: 91.189.91.23 80]\nErr http://security.ubuntu.com trusty-security/restricted Sources\n  302  Found [IP: 91.189.91.23 80]\nErr http://security.ubuntu.com trusty-security/universe Sources\n  302  Found [IP: 91.189.91.23 80]\nErr http://security.ubuntu.com trusty-security/multiverse Sources\n  302  Found [IP: 91.189.91.23 80]\nErr http://security.ubuntu.com trusty-security/main amd64 Packages\n  302  Found [IP: 91.189.91.23 80]\nErr http://security.ubuntu.com trusty-security/restricted amd64 Packages\n  302  Found [IP: 91.189.91.23 80]\nErr http://security.ubuntu.com trusty-security/universe amd64 Packages\n  302  Found [IP: 91.189.91.23 80]\nErr http://security.ubuntu.com trusty-security/multiverse amd64 Packages\n  302  Found [IP: 91.189.91.23 80]\nErr http://security.ubuntu.com trusty-security/main i386 Packages\n  302  Found [IP: 91.189.91.23 80]\nErr http://security.ubuntu.com trusty-security/restricted i386 Packages\n  302  Found [IP: 91.189.91.23 80]\nErr http://security.ubuntu.com trusty-security/universe i386 Packages\n  302  Found [IP: 91.189.91.23 80]\nErr http://security.ubuntu.com trusty-security/multiverse i386 Packages\n  302  Found [IP: 91.189.91.23 80]\nIgn http://archive.ubuntu.com trusty/main Translation-en_US\nIgn http://archive.ubuntu.com trusty/main Translation-en\nIgn http://archive.ubuntu.com trusty/multiverse Translation-en_US\nIgn http://archive.ubuntu.com trusty/multiverse Translation-en\nIgn http://archive.ubuntu.com trusty/restricted Translation-en_US\nIgn http://archive.ubuntu.com trusty/restricted Translation-en\nIgn http://archive.ubuntu.com trusty/universe Translation-en_US\nIgn http://archive.ubuntu.com trusty/universe Translation-en\nIgn http://archive.ubuntu.com trusty-updates/main Translation-en_US\nIgn http://archive.ubuntu.com trusty-updates/main Translation-en\nIgn http://archive.ubuntu.com trusty-updates/multiverse Translation-en_US\nIgn http://archive.ubuntu.com trusty-updates/multiverse Translation-en\nIgn http://archive.ubuntu.com trusty-updates/restricted Translation-en_US\nIgn http://archive.ubuntu.com trusty-updates/restricted Translation-en\nIgn http://archive.ubuntu.com trusty-updates/universe Translation-en_US\nIgn http://archive.ubuntu.com trusty-updates/universe Translation-en\nIgn http://archive.ubuntu.com trusty-backports/main Translation-en_US\nIgn http://archive.ubuntu.com trusty-backports/main Translation-en\nIgn http://archive.ubuntu.com trusty-backports/multiverse Translation-en_US\nIgn http://archive.ubuntu.com trusty-backports/multiverse Translation-en\nIgn http://archive.ubuntu.com trusty-backports/restricted Translation-en_US\nIgn http://archive.ubuntu.com trusty-backports/restricted Translation-en\nIgn http://archive.ubuntu.com trusty-backports/universe Translation-en_US\nIgn http://archive.ubuntu.com trusty-backports/universe Translation-en\nErr http://archive.ubuntu.com trusty/main Sources\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty/restricted Sources\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty/universe Sources\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty/multiverse Sources\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty/main amd64 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty/restricted amd64 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty/universe amd64 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty/multiverse amd64 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty/main i386 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty/restricted i386 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty/universe i386 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty/multiverse i386 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-updates/main Sources\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-updates/restricted Sources\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-updates/universe Sources\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-updates/multiverse Sources\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-updates/main amd64 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-updates/restricted amd64 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-updates/universe amd64 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-updates/multiverse amd64 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-updates/main i386 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-updates/restricted i386 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-updates/universe i386 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-updates/multiverse i386 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-backports/main Sources\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-backports/restricted Sources\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-backports/universe Sources\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-backports/multiverse Sources\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-backports/main amd64 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-backports/restricted amd64 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-backports/universe amd64 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-backports/multiverse amd64 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-backports/main i386 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-backports/restricted i386 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-backports/universe i386 Packages\n  302  Found [IP: 91.189.88.161 80]\nErr http://archive.ubuntu.com trusty-backports/multiverse i386 Packages\n  302  Found [IP: 91.189.88.161 80]\nReading package lists...\nBuilding dependency tree...\nReading state information...\napt is already the newest version.\n0 upgraded, 0 newly installed, 0 to remove and 2 not upgraded.", "stdout_lines": ["Ign http://archive.ubuntu.com trusty InRelease", "Ign http://archive.ubuntu.com trusty-updates InRelease", "Ign http://archive.ubuntu.com trusty-backports InRelease", "Ign http://archive.ubuntu.com trusty Release.gpg", "Ign http://security.ubuntu.com trusty-security InRelease", "Ign http://archive.ubuntu.com trusty-updates Release.gpg", "Ign http://security.ubuntu.com trusty-security Release.gpg", "Ign http://archive.ubuntu.com trusty-backports Release.gpg", "Ign http://security.ubuntu.com trusty-security Release", "Ign http://archive.ubuntu.com trusty Release", "Ign http://security.ubuntu.com trusty-security/main Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates Release", "Ign http://security.ubuntu.com trusty-security/restricted Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports Release", "Ign http://security.ubuntu.com trusty-security/universe Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty/main Sources/DiffIndex", "Ign http://security.ubuntu.com trusty-security/multiverse Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty/restricted Sources/DiffIndex", "Ign http://security.ubuntu.com trusty-security/main amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/universe Sources/DiffIndex", "Ign http://security.ubuntu.com trusty-security/restricted amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/multiverse Sources/DiffIndex", "Ign http://security.ubuntu.com trusty-security/universe amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/main amd64 Packages/DiffIndex", "Ign http://security.ubuntu.com trusty-security/multiverse amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/restricted amd64 Packages/DiffIndex", "Ign http://security.ubuntu.com trusty-security/main i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/universe amd64 Packages/DiffIndex", "Ign http://security.ubuntu.com trusty-security/restricted i386 Packages/DiffIndex", "Ign http://security.ubuntu.com trusty-security/universe i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/multiverse amd64 Packages/DiffIndex", "Ign http://security.ubuntu.com trusty-security/multiverse i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/main i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/restricted i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/universe i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty/multiverse i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/main Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/restricted Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/universe Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/multiverse Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/main amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/restricted amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/universe amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/multiverse amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/main i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/restricted i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/universe i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-updates/multiverse i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/main Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/restricted Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/universe Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/multiverse Sources/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/main amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/restricted amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/universe amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/multiverse amd64 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/main i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/restricted i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/universe i386 Packages/DiffIndex", "Ign http://archive.ubuntu.com trusty-backports/multiverse i386 Packages/DiffIndex", "Ign http://security.ubuntu.com trusty-security/main Translation-en_US", "Ign http://security.ubuntu.com trusty-security/main Translation-en", "Ign http://security.ubuntu.com trusty-security/multiverse Translation-en_US", "Ign http://security.ubuntu.com trusty-security/multiverse Translation-en", "Ign http://security.ubuntu.com trusty-security/restricted Translation-en_US", "Ign http://security.ubuntu.com trusty-security/restricted Translation-en", "Ign http://security.ubuntu.com trusty-security/universe Translation-en_US", "Ign http://security.ubuntu.com trusty-security/universe Translation-en", "Err http://security.ubuntu.com trusty-security/main Sources", "  302  Found [IP: 91.189.91.23 80]", "Err http://security.ubuntu.com trusty-security/restricted Sources", "  302  Found [IP: 91.189.91.23 80]", "Err http://security.ubuntu.com trusty-security/universe Sources", "  302  Found [IP: 91.189.91.23 80]", "Err http://security.ubuntu.com trusty-security/multiverse Sources", "  302  Found [IP: 91.189.91.23 80]", "Err http://security.ubuntu.com trusty-security/main amd64 Packages", "  302  Found [IP: 91.189.91.23 80]", "Err http://security.ubuntu.com trusty-security/restricted amd64 Packages", "  302  Found [IP: 91.189.91.23 80]", "Err http://security.ubuntu.com trusty-security/universe amd64 Packages", "  302  Found [IP: 91.189.91.23 80]", "Err http://security.ubuntu.com trusty-security/multiverse amd64 Packages", "  302  Found [IP: 91.189.91.23 80]", "Err http://security.ubuntu.com trusty-security/main i386 Packages", "  302  Found [IP: 91.189.91.23 80]", "Err http://security.ubuntu.com trusty-security/restricted i386 Packages", "  302  Found [IP: 91.189.91.23 80]", "Err http://security.ubuntu.com trusty-security/universe i386 Packages", "  302  Found [IP: 91.189.91.23 80]", "Err http://security.ubuntu.com trusty-security/multiverse i386 Packages", "  302  Found [IP: 91.189.91.23 80]", "Ign http://archive.ubuntu.com trusty/main Translation-en_US", "Ign http://archive.ubuntu.com trusty/main Translation-en", "Ign http://archive.ubuntu.com trusty/multiverse Translation-en_US", "Ign http://archive.ubuntu.com trusty/multiverse Translation-en", "Ign http://archive.ubuntu.com trusty/restricted Translation-en_US", "Ign http://archive.ubuntu.com trusty/restricted Translation-en", "Ign http://archive.ubuntu.com trusty/universe Translation-en_US", "Ign http://archive.ubuntu.com trusty/universe Translation-en", "Ign http://archive.ubuntu.com trusty-updates/main Translation-en_US", "Ign http://archive.ubuntu.com trusty-updates/main Translation-en", "Ign http://archive.ubuntu.com trusty-updates/multiverse Translation-en_US", "Ign http://archive.ubuntu.com trusty-updates/multiverse Translation-en", "Ign http://archive.ubuntu.com trusty-updates/restricted Translation-en_US", "Ign http://archive.ubuntu.com trusty-updates/restricted Translation-en", "Ign http://archive.ubuntu.com trusty-updates/universe Translation-en_US", "Ign http://archive.ubuntu.com trusty-updates/universe Translation-en", "Ign http://archive.ubuntu.com trusty-backports/main Translation-en_US", "Ign http://archive.ubuntu.com trusty-backports/main Translation-en", "Ign http://archive.ubuntu.com trusty-backports/multiverse Translation-en_US", "Ign http://archive.ubuntu.com trusty-backports/multiverse Translation-en", "Ign http://archive.ubuntu.com trusty-backports/restricted Translation-en_US", "Ign http://archive.ubuntu.com trusty-backports/restricted Translation-en", "Ign http://archive.ubuntu.com trusty-backports/universe Translation-en_US", "Ign http://archive.ubuntu.com trusty-backports/universe Translation-en", "Err http://archive.ubuntu.com trusty/main Sources", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty/restricted Sources", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty/universe Sources", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty/multiverse Sources", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty/main amd64 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty/restricted amd64 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty/universe amd64 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty/multiverse amd64 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty/main i386 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty/restricted i386 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty/universe i386 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty/multiverse i386 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-updates/main Sources", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-updates/restricted Sources", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-updates/universe Sources", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-updates/multiverse Sources", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-updates/main amd64 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-updates/restricted amd64 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-updates/universe amd64 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-updates/multiverse amd64 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-updates/main i386 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-updates/restricted i386 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-updates/universe i386 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-updates/multiverse i386 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-backports/main Sources", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-backports/restricted Sources", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-backports/universe Sources", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-backports/multiverse Sources", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-backports/main amd64 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-backports/restricted amd64 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-backports/universe amd64 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-backports/multiverse amd64 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-backports/main i386 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-backports/restricted i386 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-backports/universe i386 Packages", "  302  Found [IP: 91.189.88.161 80]", "Err http://archive.ubuntu.com trusty-backports/multiverse i386 Packages", "  302  Found [IP: 91.189.88.161 80]", "Reading package lists...", "Building dependency tree...", "Reading state information...", "apt is already the newest version.", "0 upgraded, 0 newly installed, 0 to remove and 2 not upgraded."]}

TASK [install-fpf-repo : Get apt version] **************************************
ok: [app-prod] => {"changed": false, "cmd": "dpkg-query --showformat='${Version}' --show apt", "delta": "0:00:00.011221", "end": "2019-01-24 15:09:58.191820", "rc": 0, "start": "2019-01-24 15:09:58.180599", "stderr": "", "stderr_lines": [], "stdout": "1.0.1ubuntu2.18", "stdout_lines": ["1.0.1ubuntu2.18"]}
ok: [mon-prod] => {"changed": false, "cmd": "dpkg-query --showformat='${Version}' --show apt", "delta": "0:00:00.010530", "end": "2019-01-24 15:09:58.242856", "rc": 0, "start": "2019-01-24 15:09:58.232326", "stderr": "", "stderr_lines": [], "stdout": "1.0.1ubuntu2.18", "stdout_lines": ["1.0.1ubuntu2.18"]}

TASK [install-fpf-repo : Verify that the version of apt installed is not vulnerable to 2019-3462 (Xenial)] ***

TASK [install-fpf-repo : Verify that the version of apt installed is not vulnerable to 2019-3462 (Trusty)] ***
fatal: [app-prod]: FAILED! => {
    "assertion": false, 
    "changed": false, 
    "evaluated_to": false
}
fatal: [mon-prod]: FAILED! => {
    "assertion": false, 
    "changed": false, 
    "evaluated_to": false
}

Note all the 302's in apt's output. I'm not sure how likely this is in a corporate scenario, but there may need to be documentation on how to manually work around this.

@emkll emkll dismissed stale reviews from kushaldas and redshiftzero via 088823f Jan 24, 2019

@emkll

This comment has been minimized.

Copy link
Contributor Author

emkll commented Jan 24, 2019

good points @heartsucker, I've pushed a commit to this branch that adds an assert statement which provides a more admin friendly message in lieu of docs updates, let me know if this addresses your concerns.

As far as I know there is no workaround (apart from either using editing the apt list manually or changing networks). I propose we update the docs once this problem arises.

@emkll emkll force-pushed the fix-cve-2019-3462 branch from 088823f to 0a6bc4e Jan 24, 2019

Address review feedback
- Fail faster when upgrading apt.
- Provide a more descriptive message if apt traffic is redirected.

@emkll emkll force-pushed the fix-cve-2019-3462 branch from 0a6bc4e to cf84a81 Jan 24, 2019

@redshiftzero
Copy link
Member

redshiftzero left a comment

LGTM, approving for the point release (ran through these tasks on trusty once more for good measure)

@redshiftzero redshiftzero merged commit a71d42a into develop Jan 24, 2019

6 of 7 checks passed

ci/circleci: xenial-app-tests Your tests failed on CircleCI
Details
ci/circleci: admin-tests Your tests passed on CircleCI!
Details
ci/circleci: lint Your tests passed on CircleCI!
Details
ci/circleci: staging-test-with-rebase Your tests passed on CircleCI!
Details
ci/circleci: static-analysis-and-no-known-cves Your tests passed on CircleCI!
Details
ci/circleci: trusty-app-tests Your tests passed on CircleCI!
Details
ci/circleci: updater-gui-tests Your tests passed on CircleCI!
Details

@redshiftzero redshiftzero deleted the fix-cve-2019-3462 branch Jan 24, 2019

@heartsucker

This comment has been minimized.

Copy link
Contributor

heartsucker commented Jan 24, 2019

As far as I know there is no workaround (apart from either using editing the apt list manually or changing networks). I propose we update the docs once this problem arises.

Yeah this was basically the only way to fix this. Agree on that as the solution.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment