Public bug reported:
This issue is having multiple stages. First stage is where tor browser
blocked ubuntu.com from downloading some suspicious file in the same
time when Ubuntu 26.04.1 LTS iso file downloading is initiated. After
download is done, hash signature verification was successful. After
installation, suspicious hidden file is found at location
/etc/.resolv.conf.systemd-resolved.bak. File is including dns records
which are pointing to private ip addresses: nameserver 10.131.53.11,
nameserver 10.131.53.12, nameserver 10.131.53.13 and domain search ppa
openstack.prodstack5.lan. These ip addresses are not some kind of
loopback ip addresses like 127.0.0.53:53 which are known as part of dns
configuration. I wasn't able to find this file in available Ubuntu
documentation.
ProblemType: Bug
DistroRelease: Ubuntu 26.04
Package: dnsmasq (not installed)
ProcVersionSignature: Ubuntu 7.0.0-38.38-generic 7.0.14
Uname: Linux 7.0.0-38-generic x86_64
ApportVersion: 2.34.1-0ubuntu0.1
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: ubuntu:GNOME
Date: Fri Oct 2 15:32:18 2026
InstallationDate: Installed on 2026-09-30 (2 days ago)
InstallationMedia: Ubuntu 26.04.1 LTS "Resolute Raccoon" - Release amd64
(20260826)
ProcEnviron:
LANG=en_US.UTF-8
PATH=(custom, no username)
SHELL=/bin/bash
XDG_RUNTIME_DIR=<set>
SourcePackage: dnsmasq
UpgradeStatus: No upgrade log present (probably fresh install)
** Affects: dnsmasq (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug resolute wayland-session
** Attachment added: "Screenshot From 2026-10-02 15-52-05.png"
https://bugs.launchpad.net/bugs/2169298/+attachment/6004894/+files/Screenshot%20From%202026-10-02%2015-52-05.png
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2169298
Title:
Strange hiden config file with private ip address as dns server
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/2169298/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
