Can't update&upgrade anymore @ UM 18.04 v2 LTS

The Launchpad bug report risks being marked as incomplete - since we wouldn't know the steps to reproduce the segmentation fault, nor does anybody appear to experiencing the same issue. :thinking:


Try performing a memory test. Defective RAM can be a cause for segmentation faults.

When starting the computer, hold SHIFT before the GRUB bootloader loads. Choose "Memory Test (memtest86+)". The test may take some time to complete.


Did you try booting a previous kernel? I can't tell from this response if you did:

I suggested a couple of times to post us your Apt history from the point things were working, to give us an idea of what has changed.

Of interest: Last year, someone had a similar to situation, but this was on Debian and doesn't appear to be resolved:

I have installed new memory 4x8 GB Corsair RAM in my PC.

Everything runs without problems except:

update manager
software-properties-gtk

I have tested with VirtualBox whether the update manager works there. Yes, he does. (Ubuntu-Mate 19. 10 Live CD)

I'm gonna run a RAM test later.

I already read this article a few days ago.
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893320

Thanks anyway for the info.

I tested my new RAM. No errors.

Good to hear, that rules out hardware being the issue.

  • Did you try booting a previous kernel? Does it work when using an older kernel?
  • Mind sharing your /var/log/apt/history.log? (We only need to know what changed from 7 days ago)

Yes, I booted with another kernel and the error is still there.

I often delete my logs with Bleachbit, so I don't have any history. log (apt) now.

A few minutes ago, I did a test:
Recommended to me by:

sudo add-apt-repository ppa:libreoffice/ppa

[sudo] password for user:
Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/softwareproperties/ppa.py", line 326, in get_ppa_info
ret = get_ppa_info_from_lp(user, ppa)
File "/usr/lib/python3/dist-packages/softwareproperties/ppa.py", line 101, in get_ppa_info_from_lp
return get_info_from_lp(lp_url)
File "/usr/lib/python3/dist-packages/softwareproperties/ppa.py", line 95, in get_info_from_lp
return get_info_from_https(lp_url, True)
File "/usr/lib/python3/dist-packages/softwareproperties/ppa.py", line 88, in get_info_from_https
data = _get_https_content_py3(url, accept_json)
File "/usr/lib/python3/dist-packages/softwareproperties/ppa.py", line 120, in _get_https_content_py3
lp_page = urllib.request.urlopen(request, cafile=LAUNCHPAD_PPA_CERT)
File "/usr/lib/python3.6/urllib/request.py", line 210, in urlopen
raise ValueError('SSL support not available')
ValueError: SSL support not available

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/bin/add-apt-repository", line 136, in
shortcut = shortcut_handler(line)
File "/usr/lib/python3/dist-packages/softwareproperties/SoftwareProperties.py", line 868, in shortcut_handler
ret = factory(shortcut)
File "/usr/lib/python3/dist-packages/softwareproperties/ppa.py", line 398, in shortcut_handler
return PPAShortcutHandler(shortcut)
File "/usr/lib/python3/dist-packages/softwareproperties/ppa.py", line 355, in init
info = get_ppa_info(self.shortcut)
File "/usr/lib/python3/dist-packages/softwareproperties/ppa.py", line 338, in get_ppa_info
_get_suggested_ppa_message(user, ppa))
File "/usr/lib/python3/dist-packages/softwareproperties/ppa.py", line 295, in _get_suggested_ppa_message
lp_user = get_info_from_lp(LAUNCHPAD_USER_API % user)
File "/usr/lib/python3/dist-packages/softwareproperties/ppa.py", line 95, in get_info_from_lp
return get_info_from_https(lp_url, True)
File "/usr/lib/python3/dist-packages/softwareproperties/ppa.py", line 88, in get_info_from_https
data = _get_https_content_py3(url, accept_json)
File "/usr/lib/python3/dist-packages/softwareproperties/ppa.py", line 120, in _get_https_content_py3
lp_page = urllib.request.urlopen(request, cafile=LAUNCHPAD_PPA_CERT)
File "/usr/lib/python3.6/urllib/request.py", line 210, in urlopen
raise ValueError('SSL support not available')
ValueError: SSL support not available

Installed OpenSSL packages:

libevent-openssl-2.1-6 (2.1.8-stable-4build1)
libgnutls-openssl27 (3.5.18-1ubuntu1.1)
openssl (1.1.1-1ubuntu2.1~18.04.3)
perl-openssl-defaults (3build1)
python-openssl (17.5.0-1ubuntu1)
python3-openssl (17.5.0-1ubuntu1)
libssl-dev (1.1.1-1ubuntu2.1~18.04.3)
libssl-doc (1.1.1-1ubuntu2.1~18.04.3)
libssl1.0.0 (1.0.2n-1ubuntu5.3)
libssl1.1 (1.1.1-1ubuntu2.1~18.04.3)

Do I need package?

openssl1.0 (1.0.2n-1ubuntu5.3)

Which OpenSSL packages are un-needed? See above @ Installed OpenSSL packages...

openssl version

OpenSSL 1.1.1b 26 Feb 2019

which openssl

/usr/local/bin/openssl

openssl speed (is working)

openssl speed
Doing mdc2 for 3s on 16 size blocks: 2371743 mdc2's in 2.99s
Doing mdc2 for 3s on 64 size blocks: 654173 mdc2's in 3.00s
Doing mdc2 for 3s on 256 size blocks: 167583 mdc2's in 3.00s
...

I don't know what is wrong with my OpenSSL.
I can't start the update manager, must have something to do with OpenSSL. Just what?

This might explain it. Did you compile/install a build of OpenSSL or other software recently?

The contents of /usr/local will take priority over /usr, etc, which would explain why reinstalling packages did not make a difference.

As root, delete traces of openssl in these locations:

  • /usr/local/bin
  • /usr/local/lib

Use this command to help locate the files:

find /usr/local -name "*openssl*"

I have the binary of 'openssl' in folder:

/bin
/usr/bin

Output:

find /usr/local -name "openssl"

/usr/local/share/doc/openssl
/usr/local/share/doc/openssl/html/man1/openssl-rsautl.html
/usr/local/share/doc/openssl/html/man1/openssl-enc.html
/usr/local/share/doc/openssl/html/man1/openssl-ca.html
/usr/local/share/doc/openssl/html/man1/openssl-gendsa.html
/usr/local/share/doc/openssl/html/man1/openssl-pkey.html
/usr/local/share/doc/openssl/html/man1/openssl-speed.html
/usr/local/share/doc/openssl/html/man1/openssl-crl.html
/usr/local/share/doc/openssl/html/man1/openssl-errstr.html
/usr/local/share/doc/openssl/html/man1/openssl-storeutl.html
/usr/local/share/doc/openssl/html/man1/openssl-pkcs12.html
/usr/local/share/doc/openssl/html/man1/openssl-c_rehash.html
/usr/local/share/doc/openssl/html/man1/openssl-pkeyparam.html
/usr/local/share/doc/openssl/html/man1/openssl-s_client.html
/usr/local/share/doc/openssl/html/man1/openssl-ciphers.html
/usr/local/share/doc/openssl/html/man1/openssl.html
/usr/local/share/doc/openssl/html/man1/openssl-rand.html
/usr/local/share/doc/openssl/html/man1/openssl-pkeyutl.html
/usr/local/share/doc/openssl/html/man1/openssl-dsaparam.html
/usr/local/share/doc/openssl/html/man1/openssl-srp.html
/usr/local/share/doc/openssl/html/man1/openssl-genrsa.html
/usr/local/share/doc/openssl/html/man1/openssl-sess_id.html
/usr/local/share/doc/openssl/html/man1/openssl-dsa.html
/usr/local/share/doc/openssl/html/man1/openssl-dhparam.html
/usr/local/share/doc/openssl/html/man1/openssl-dgst.html
/usr/local/share/doc/openssl/html/man1/openssl-prime.html
/usr/local/share/doc/openssl/html/man1/openssl-s_server.html
/usr/local/share/doc/openssl/html/man1/openssl-cms.html
/usr/local/share/doc/openssl/html/man1/openssl-pkcs8.html
/usr/local/share/doc/openssl/html/man1/openssl-nseq.html
/usr/local/share/doc/openssl/html/man1/openssl-ts.html
/usr/local/share/doc/openssl/html/man1/openssl-rsa.html
/usr/local/share/doc/openssl/html/man1/openssl-req.html
/usr/local/share/doc/openssl/html/man1/openssl-pkcs7.html
/usr/local/share/doc/openssl/html/man1/openssl-verify.html
/usr/local/share/doc/openssl/html/man1/openssl-tsget.html
/usr/local/share/doc/openssl/html/man1/openssl-ocsp.html
/usr/local/share/doc/openssl/html/man1/openssl-crl2pkcs7.html
/usr/local/share/doc/openssl/html/man1/openssl-s_time.html
/usr/local/share/doc/openssl/html/man1/openssl-spkac.html
/usr/local/share/doc/openssl/html/man1/openssl-version.html
/usr/local/share/doc/openssl/html/man1/openssl-ecparam.html
/usr/local/share/doc/openssl/html/man1/openssl-list.html
/usr/local/share/doc/openssl/html/man1/openssl-genpkey.html
/usr/local/share/doc/openssl/html/man1/openssl-x509.html
/usr/local/share/doc/openssl/html/man1/openssl-engine.html
/usr/local/share/doc/openssl/html/man1/openssl-asn1parse.html
/usr/local/share/doc/openssl/html/man1/openssl-smime.html
/usr/local/share/doc/openssl/html/man1/openssl-passwd.html
/usr/local/share/doc/openssl/html/man1/openssl-ec.html
/usr/local/share/doc/openssl/html/man1/openssl-rehash.html
/usr/local/share/man/man1/openssl-prime.1
/usr/local/share/man/man1/openssl-enc.1
/usr/local/share/man/man1/openssl-verify.1
/usr/local/share/man/man1/openssl-tsget.1
/usr/local/share/man/man1/openssl-ts.1
/usr/local/share/man/man1/openssl-pkcs8.1ssl
/usr/local/share/man/man1/openssl-s_time.1ssl
/usr/local/share/man/man1/openssl-genpkey.1
/usr/local/share/man/man1/openssl-list.1ssl
/usr/local/share/man/man1/openssl-rsa.1ssl
/usr/local/share/man/man1/openssl-crl.1ssl
/usr/local/share/man/man1/openssl-pkeyutl.1
/usr/local/share/man/man1/openssl-dhparam.1ssl
/usr/local/share/man/man1/openssl-ciphers.1
/usr/local/share/man/man1/openssl-c_rehash.1
/usr/local/share/man/man1/openssl-cms.1ssl
/usr/local/share/man/man1/openssl-enc.1ssl
/usr/local/share/man/man1/openssl-ts.1ssl
/usr/local/share/man/man1/openssl-x509.1ssl
/usr/local/share/man/man1/openssl-pkcs12.1
/usr/local/share/man/man1/openssl-spkac.1
/usr/local/share/man/man1/openssl-genrsa.1
/usr/local/share/man/man1/openssl.1
/usr/local/share/man/man1/openssl.1ssl
/usr/local/share/man/man1/openssl-sess_id.1
/usr/local/share/man/man1/openssl-rand.1ssl
/usr/local/share/man/man1/openssl-crl2pkcs7.1
/usr/local/share/man/man1/openssl-errstr.1ssl
/usr/local/share/man/man1/openssl-passwd.1ssl
/usr/local/share/man/man1/openssl-pkcs12.1ssl
/usr/local/share/man/man1/openssl-verify.1ssl
/usr/local/share/man/man1/openssl-pkcs7.1
/usr/local/share/man/man1/openssl-nseq.1
/usr/local/share/man/man1/openssl-storeutl.1
/usr/local/share/man/man1/openssl-tsget.1ssl
/usr/local/share/man/man1/openssl-ca.1ssl
/usr/local/share/man/man1/openssl-gendsa.1
/usr/local/share/man/man1/openssl-smime.1
/usr/local/share/man/man1/openssl-nseq.1ssl
/usr/local/share/man/man1/openssl-gendsa.1ssl
/usr/local/share/man/man1/openssl-req.1ssl
/usr/local/share/man/man1/openssl-rsa.1
/usr/local/share/man/man1/openssl-ec.1ssl
/usr/local/share/man/man1/openssl-genpkey.1ssl
/usr/local/share/man/man1/openssl-ca.1
/usr/local/share/man/man1/openssl-dsa.1
/usr/local/share/man/man1/openssl-cms.1
/usr/local/share/man/man1/openssl-pkey.1
/usr/local/share/man/man1/openssl-asn1parse.1ssl
/usr/local/share/man/man1/openssl-speed.1
/usr/local/share/man/man1/openssl-rsautl.1
/usr/local/share/man/man1/openssl-dgst.1ssl
/usr/local/share/man/man1/openssl-dsaparam.1
/usr/local/share/man/man1/openssl-srp.1
/usr/local/share/man/man1/openssl-c_rehash.1ssl
/usr/local/share/man/man1/openssl-engine.1ssl
/usr/local/share/man/man1/openssl-passwd.1
/usr/local/share/man/man1/openssl-req.1
/usr/local/share/man/man1/openssl-ocsp.1
/usr/local/share/man/man1/openssl-asn1parse.1
/usr/local/share/man/man1/openssl-s_server.1ssl
/usr/local/share/man/man1/openssl-dsaparam.1ssl
/usr/local/share/man/man1/openssl-speed.1ssl
/usr/local/share/man/man1/openssl-pkeyparam.1
/usr/local/share/man/man1/openssl-s_server.1
/usr/local/share/man/man1/openssl-spkac.1ssl
/usr/local/share/man/man1/openssl-version.1ssl
/usr/local/share/man/man1/openssl-dhparam.1
/usr/local/share/man/man1/openssl-sess_id.1ssl
/usr/local/share/man/man1/openssl-rand.1
/usr/local/share/man/man1/openssl-pkcs8.1
/usr/local/share/man/man1/openssl-rehash.1
/usr/local/share/man/man1/openssl-engine.1
/usr/local/share/man/man1/openssl-s_client.1ssl
/usr/local/share/man/man1/openssl-s_client.1
/usr/local/share/man/man1/openssl-ec.1
/usr/local/share/man/man1/openssl-rehash.1ssl
/usr/local/share/man/man1/openssl-s_time.1
/usr/local/share/man/man1/openssl-rsautl.1ssl
/usr/local/share/man/man1/openssl-genrsa.1ssl
/usr/local/share/man/man1/openssl-pkeyutl.1ssl
/usr/local/share/man/man1/openssl-crl2pkcs7.1ssl
/usr/local/share/man/man1/openssl-crl.1
/usr/local/share/man/man1/openssl-list.1
/usr/local/share/man/man1/openssl-ecparam.1
/usr/local/share/man/man1/openssl-ecparam.1ssl
/usr/local/share/man/man1/openssl-pkcs7.1ssl
/usr/local/share/man/man1/openssl-errstr.1
/usr/local/share/man/man1/openssl-pkey.1ssl
/usr/local/share/man/man1/openssl-ciphers.1ssl
/usr/local/share/man/man1/openssl-smime.1ssl
/usr/local/share/man/man1/openssl-dsa.1ssl
/usr/local/share/man/man1/openssl-version.1
/usr/local/share/man/man1/openssl-x509.1
/usr/local/share/man/man1/openssl-ocsp.1ssl
/usr/local/share/man/man1/openssl-pkeyparam.1ssl
/usr/local/share/man/man1/openssl-dgst.1
/usr/local/include/openssl
/usr/local/include/openssl/opensslv.h
/usr/local/include/openssl/opensslconf.h
/usr/local/lib/pkgconfig/openssl.pc
/usr/local/bin/openssl

Which traces must I delete all?

I deleted exec file "/usr/local/bin/openssl"

It'd be good if you'd tell me what things to erase :slight_smile:

Which files to delete in "/usr/local/lib"?

Thanks for trying to help me @ lah7

The find command can delete them for you.

find /usr/local -name "*openssl*" -delete

:warning: Normally this would be dangerous - but we just checked the files in the post above. :point_up:

Once deleted, the system will revert back to using the packaged version of OpenSSL. This output should change to:

~$ which openssl
/usr/bin/openssl
1 Like

ok...

find /usr/local -name "openssl" -delete

find: cannot delete ‘/usr/local/share/doc/openssl’: Directory not empty
find: cannot delete ‘/usr/local/include/openssl’: Directory not empty

which openssl

Output:
/usr/bin/openssl

openssl binary placed in folder:
/bin
/usr/bin/

but:

/usr/bin/openssl version

/usr/bin/openssl: /usr/local/lib/libssl.so.1.1: version OPENSSL_1_1_1' not found (required by /usr/bin/openssl) /usr/bin/openssl: /usr/local/lib/libcrypto.so.1.1: versionOPENSSL_1_1_1' not found (required by /usr/bin/openssl)

/bin/openssl version

OpenSSL 1.1.0g 2 Nov 2017

Do I have to delete the openssl binary in /bin?

Do I need package?
openssl1.0

I did this:

I deleted openssl binary in /bin
Deleted:

/usr/local/lib/libcrypto.so
/usr/local/lib/libcrypto.so.1.0.0
/usr/local/lib/libcrypto.so.1.1

/usr/local/lib/libssl.so
/usr/local/lib/libssl.so.1.0.0
/usr/local/lib/libssl.so.1.1

then:
apt-get install --reinstall openssl
apt-get install --reinstall libssl1.1

which openssl
Output:
/usr/bin/openssl

/usr/bin/openssl version

Output:
OpenSSL 1.1.1 11 Sep 2018

What about package "openssl1.0 & libssl1.0.0"
Do I need them?

Packages openssl1.0 is not installed and libssl1.0.0 is installed.

Installed OpenSSL packages:

libevent-openssl-2.1-6 (2.1.8-stable-4build1)
libgnutls-openssl27 (3.5.18-1ubuntu1.1)
openssl (1.1.1-1ubuntu2.1~18.04.3)
perl-openssl-defaults (3build1)
python-openssl (17.5.0-1ubuntu1)
python3-openssl (17.5.0-1ubuntu1)
libssl-dev (1.1.1-1ubuntu2.1~18.04.3)
libssl-doc (1.1.1-1ubuntu2.1~18.04.3)
libssl1.0.0 (1.0.2n-1ubuntu5.3)
libssl1.1 (1.1.1-1ubuntu2.1~18.04.3)

whereis openssl

Output:
/usr/bin/openssl
/usr/include/openssl
/usr/share/man/man1/openssl.1ssl.gz

openssl version -a

Output:

OpenSSL 1.1.1 11 Sep 2018
built on: Fri Jun 14 12:50:28 2019 UTC
platform: debian-amd64
options: bn(64,64) rc4(8x,int) des(int) blowfish(ptr)
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2 -fdebug-prefix-map=/build/openssl-OlMTmP/openssl-1.1.1=. -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
OPENSSLDIR: "/usr/lib/ssl"
ENGINESDIR: "/usr/lib/x86_64-linux-gnu/engines-1.1"
Seeding source: os-specific

Is that right @ lah7?

Yeah :slight_smile: Update-Manager is working now. It was a OpenSSL problem.

What's with /etc/update-manager/meta-release?

Can I use?
#'https'#
URI = https://changelogs.ubuntu.com/meta-release
URI_LTS = https://changelogs.ubuntu.com/meta-release-lts

or should it?
URI = http://changelogs.ubuntu.com/meta-release
URI_LTS = http://changelogs.ubuntu.com/meta-release-lts

Great stuff - I'm not sure how you've ended up with a custom broken build of OpenSSL but at least it's working again.

I just checked an up-to-date 18.04 instance and the latest version of OpenSSL is indeed 1.1.1 11 Sep 2018.

For /etc/update-manager/meta-release, the default (and recommended) is https - the s meaning secure connections are established to the server, reducing the chance of a man-in-the-middle attack while it is in transit over the internet.

I have @ /etc/update-manager/meta-release:

URI = https://changelogs.ubuntu.com/meta-release
URI_LTS = https://changelogs.ubuntu.com/meta-release-lts

sudo apt-get update

Output:
Hit:1 http://ppa.launchpad.net/graphics-drivers/ppa/ubuntu bionic InRelease
Hit:2 http://de.archive.ubuntu.com/ubuntu bionic InRelease
Get:3 http://de.archive.ubuntu.com/ubuntu bionic-updates InRelease [88,7 kB]
Get:6 http://de.archive.ubuntu.com/ubuntu bionic-security InRelease [88,7 kB]
Get:10 http://de.archive.ubuntu.com/ubuntu bionic-updates/main amd64 Packages [676 kB]
Get:11 http://de.archive.ubuntu.com/ubuntu bionic-updates/main i386 Packages [554 kB]
Get:12 http://de.archive.ubuntu.com/ubuntu bionic-updates/universe amd64 Packages [964 kB]
Get:13 http://de.archive.ubuntu.com/ubuntu bionic-updates/universe i386 Packages [948 kB]
Get:14 http://de.archive.ubuntu.com/ubuntu bionic-security/main amd64 Packages [443 kB]
Get:15 http://de.archive.ubuntu.com/ubuntu bionic-security/main i386 Packages [334 kB]

How can I change all http urls to https?

Edit my sources.list and change all urls there to https?

Yes, change them in /etc/apt/sources.list and /etc/apt/sources.list.d/, then run sudo apt update again.

ok, I'll do that, thanks......

@ lah7, which ubuntu package apt server do you have in sources.list with https?

these not working with https:
deb https://de.archive.ubuntu.com/ubuntu/ bionic main restricted
deb https://de.archive.ubuntu.com/ubuntu/ bionic-updates main restricted

deb https://de.archive.ubuntu.com/ubuntu/ bionic universe
deb https://de.archive.ubuntu.com/ubuntu/ bionic-updates universe

deb https://de.archive.ubuntu.com/ubuntu/ bionic-security main restricted
deb https://de.archive.ubuntu.com/ubuntu/ bionic-security universe

so I revert back to http, after that it works again.

My bad! I replied while I was on my phone and didn't actually check my sources.list or if the server actually supports HTTPS, which it doesn't. :man_facepalming:

deb http://gb.archive.ubuntu.com/ubuntu/ bionic main restricted
deb http://gb.archive.ubuntu.com/ubuntu/ bionic-updates main restricted
deb http://gb.archive.ubuntu.com/ubuntu/ bionic universe
deb http://gb.archive.ubuntu.com/ubuntu/ bionic-updates universe
deb http://gb.archive.ubuntu.com/ubuntu/ bionic multiverse
deb http://gb.archive.ubuntu.com/ubuntu/ bionic-updates multiverse
deb http://gb.archive.ubuntu.com/ubuntu/ bionic-backports main restricted universe multiverse
deb http://security.ubuntu.com/ubuntu bionic-security main restricted
deb http://security.ubuntu.com/ubuntu bionic-security universe
deb http://security.ubuntu.com/ubuntu bionic-security multiverse

While HTTPS is generally important to have, it's not necessary for Apt packages as they are signed with a key trusted by the system. So in this case, security is not compromised as the package will be refused if it was tampered with.

Here's a more detailed explanation:

So, these need to stay HTTP. Sorry, I should have double checked. :frowning:

2 Likes

This solution solved my issue, tks

2 Likes

In Ubuntu 18.04.6 LTS I was frustrated by SEGV crashes,
in do-release-upgrade ( ubuntu-release-upgrader/check-new-release ) every time.
Also I got a consistent SEGV if I tried to run update-manager
I had tried lots of other things, lots of other checking ... to find the problem.
And was not figuring it out. That is, until I walked through this post. ( Which is grand, BTW )
Hooray, my problem was caused by an installation of openssl-1.1.0f under /usr/local/...
for which I had no source build ; but I was able to, manually, clean out those files - and that finally resolved it.
Thanks !!