Viewing Issue Advanced Details
ID:	Category:	Severity:	Reproducibility:	Date Submitted:	Last Update:
239	[Web Services]	major	always	11-17-04 17:08	11-17-04 17:10
Reporter:	smithkm	Platform:
Assigned To:	smithkm	OS:
Priority:	high	OS Version:
Status:	closed	Product Version:
Product Build:		Resolution:	fixed
Projection:	none
ETA:	none
Summary:	Upgrade Gallery
Description:	There is a GLSA regarding Gallery. We need to update to >= 1.4.4.
Steps To Reproduce:
Additional Information:	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200411-10:01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -                                             http://security.gentoo.org/ [^] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -   Severity: Low      Title: Gallery: Cross-site scripting vulnerability       Date: November 06, 2004       Bugs: 69904         ID: 200411-10:01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Gallery is vulnerable to cross-site scripting attacks. Background ========== Gallery is a web application written in PHP which is used to organize and publish photo albums. It allows multiple users to build and maintain their own albums. It also supports the mirroring of images on other servers. Affected packages =================     -------------------------------------------------------------------      Package / Vulnerable / Unaffected     -------------------------------------------------------------------   1 www-apps/gallery < 1.4.4_p4 >= 1.4.4_p4 Description =========== Jim Paris has discovered a cross-site scripting vulnerability in Gallery. Impact ====== By sending a carefully crafted URL, an attacker can inject and execute script code in the victim's browser window, and potentially compromise the users gallery. Workaround ========== There is no known workaround at this time. Resolution ========== All Gallery users should upgrade to the latest version:     # emerge --sync     # emerge --ask --oneshot --verbose ">=www-apps/gallery-1.4.4_p4" References ==========   [ 1 ] Gallery Announcement         http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=142&mode=thread&order=0&thold=0 [^] Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website:   http://security.gentoo.org/glsa/glsa-200411-10.xml [^]
Attached Files:

Notes
smithkm    11-17-04 17:09	Done without a hitch. All galleries were updated.

Viewing Issue Advanced Details
ID:	Category:	Severity:	Reproducibility:	Date Submitted:	Last Update:
238	[Web Services]	major	always	11-12-04 18:11	11-17-04 12:22
Reporter:	chavoumd	Platform:
Assigned To:	smithkm	OS:
Priority:	high	OS Version:
Status:	closed	Product Version:
Product Build:		Resolution:	open
Projection:	none
ETA:	none
Summary:	Gallery PHP errors when viewing any image/album
Description:	There are some PHP errors when viewing any page in the gallery.
Steps To Reproduce:
Additional Information:	Above header: ------------- Warning: session_start(): open(/tmp/sess_04d7fafc7c05e55f04670a1b854f1189, O_RDWR) failed: Permission denied (13) in /var/www/localhost/htdocs/gallery/session.php on line 60 Warning: session_start(): Cannot send session cookie - headers already sent by (output started at /var/www/localhost/htdocs/gallery/session.php:60) in /var/www/localhost/htdocs/gallery/session.php on line 60 Warning: session_start(): Cannot send session cache limiter - headers already sent (output started at /var/www/localhost/htdocs/gallery/session.php:60) in /var/www/localhost/htdocs/gallery/session.php on line 60 Below Footer: ------------- Warning: Unknown(): open(/tmp/sess_04d7fafc7c05e55f04670a1b854f1189, O_RDWR) failed: Permission denied (13) in Unknown on line 0 Warning: Unknown(): Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0
Attached Files:

Notes
smithkm    11-12-04 18:53	I shut off Apache, did rm -f /tmp/sess_*, and then restarted Apache and the errors went away. I'll wait a few days before closing the bug.
smithkm    11-17-04 12:22	it's been several days and the problem doesn't seem to be occurring still, so we'll call it good.

Viewing Issue Advanced Details
ID:	Category:	Severity:	Reproducibility:	Date Submitted:	Last Update:
228	[Web Services]	major	always	10-26-04 15:42	10-26-04 19:14
Reporter:	smithkm	Platform:
Assigned To:	smithkm	OS:
Priority:	high	OS Version:
Status:	closed	Product Version:
Product Build:		Resolution:	fixed
Projection:	none
ETA:	none
Summary:	update mysql on all servers
Description:	There is a GLSA for MySQL 4.
Steps To Reproduce:
Additional Information:	Currently being emerged on statler. AFAIK, this is the only machine with it running.
Attached Files:

Notes
smithkm    10-26-04 15:44	waldorf also has it running; currently syncing & emerging there too.
smithkm    10-26-04 19:14	done!

Viewing Issue Advanced Details
ID:	Category:	Severity:	Reproducibility:	Date Submitted:	Last Update:
229	[Web Services]	minor	always	10-26-04 15:50	10-26-04 16:19
Reporter:	smithkm	Platform:
Assigned To:	smithkm	OS:
Priority:	high	OS Version:
Status:	closed	Product Version:
Product Build:		Resolution:	fixed
Projection:	none
ETA:	none
Summary:	update mantis on statler
Description:	there is a newer version of mantis available that has plenty of bugfixes and security patches.
Steps To Reproduce:
Additional Information:	deploying on statler right now...
Attached Files:

Notes
smithkm    10-26-04 16:18	updated to 0.19 and created a patch so future updates should go smoother. patch saved in ~/software-modifications/mantis-unified-patch on statler.

Viewing Issue Advanced Details
ID:	Category:	Severity:	Reproducibility:	Date Submitted:	Last Update:
222	[Web Services]	major	always	10-20-04 12:43	10-26-04 15:41
Reporter:	smithkm	Platform:
Assigned To:	smithkm	OS:
Priority:	high	OS Version:
Status:	closed	Product Version:
Product Build:		Resolution:	fixed
Projection:	none
ETA:	none
Summary:	update libtiff on statler
Description:	There is a GLSA regarding tiff.
Steps To Reproduce:
Additional Information:	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200410-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -                                             http://security.gentoo.org/ [^] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -   Severity: Normal      Title: tiff: Buffer overflows in image decoding       Date: October 13, 2004         ID: 200410-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple heap-based overflows have been found in the tiff library image decoding routines, potentially allowing to execute arbitrary code with the rights of the user viewing a malicious image. Background ========== The tiff library contains encoding and decoding routines for the Tag Image File Format. It is called by numerous programs, including GNOME and KDE, to help in displaying TIFF images. xv is a multi-format image manipulation utility that is statically linked to the tiff library. Affected packages =================     -------------------------------------------------------------------      Package / Vulnerable / Unaffected     -------------------------------------------------------------------   1 media-libs/tiff < 3.6.1-r2 >= 3.6.1-r2   2 media-gfx/xv <= 3.10a-r7 >= 3.10a-r8     -------------------------------------------------------------------      2 affected packages on all of their supported architectures.     ------------------------------------------------------------------- Description =========== Chris Evans found heap-based overflows in RLE decoding routines in tif_next.c, tif_thunder.c and potentially tif_luv.c. Impact ====== A remote attacker could entice a user to view a carefully crafted TIFF image file, which would potentially lead to execution of arbitrary code with the rights of the user viewing the image. This affects any program that makes use of the tiff library, including GNOME and KDE web browsers or mail readers. Workaround ========== There is no known workaround at this time. Resolution ========== All tiff library users should upgrade to the latest version:     # emerge sync     # emerge -pv ">=media-libs/tiff-3.6.1-r2"     # emerge ">=media-libs/tiff-3.6.1-r2" xv makes use of the tiff library and needs to be recompiled to receive the new patched version of the library. All xv users should also upgrade to the latest version:     # emerge sync     # emerge -pv ">=media-gfx/xv-3.10a-r8"     # emerge ">=media-gfx/xv-3.10a-r8" References ==========   [ 1 ] CAN-2004-0803         http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0803 [^]
Attached Files:

Notes
smithkm    10-26-04 15:39	updated

Viewing Issue Advanced Details
ID:	Category:	Severity:	Reproducibility:	Date Submitted:	Last Update:
223	[Web Services]	major	always	10-20-04 12:44	10-26-04 15:10
Reporter:	smithkm	Platform:
Assigned To:	smithkm	OS:
Priority:	high	OS Version:
Status:	closed	Product Version:
Product Build:		Resolution:	fixed
Projection:	none
ETA:	none
Summary:	update wordpress
Description:	There is a GLSA regarding WordPress 1.2
Steps To Reproduce:
Additional Information:	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200410-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -                                             http://security.gentoo.org/ [^] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -   Severity: Low      Title: WordPress: HTTP response splitting and XSS vulnerabilities       Date: October 14, 2004       Bugs: 65798         ID: 200410-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== WordPress contains HTTP response splitting and cross-site scripting vulnerabilities. Background ========== WordPress is a PHP and MySQL based content management and publishing system. Affected packages =================     -------------------------------------------------------------------      Package / Vulnerable / Unaffected     -------------------------------------------------------------------   1 www-apps/wordpress < 1.2.1 >= 1.2.1 Description =========== Due to the lack of input validation in the administration panel scripts, WordPress is vulnerable to HTTP response splitting and cross-site scripting attacks. Impact ====== A malicious user could inject arbitrary response data, leading to content spoofing, web cache poisoning and other cross-site scripting or HTTP response splitting attacks. This could result in compromising the victim's data or browser. Workaround ========== There is no known workaround at this time. Resolution ========== All WordPress users should upgrade to the latest version:     # emerge sync     # emerge -pv ">=www-apps/wordpress-1.2.1"     # emerge ">=www-apps/wordpress-1.2.1" References ==========   [ 1 ] WordPress 1.2.1 Release Notes         http://wordpress.org/development/2004/10/wp-121/ [^] Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website:   http://security.gentoo.org/glsa/glsa-200410-12.xml [^]
Attached Files:

Notes
smithkm    10-26-04 15:09	updated to 1.2.1

Viewing Issue Advanced Details
ID:	Category:	Severity:	Reproducibility:	Date Submitted:	Last Update:
197	[Lab Management]	feature	always	08-25-04 16:13	10-12-04 19:26
Reporter:	smithkm	Platform:
Assigned To:	smithkm	OS:
Priority:	urgent	OS Version:
Status:	closed	Product Version:
Product Build:		Resolution:	open
Projection:	none
ETA:	none
Summary:	update the lab build
Description:	The current COSI Lab build is months out of date. A new build should be compiled that uses a fully-modular kernel and GNOME 2.6.
Steps To Reproduce:
Additional Information:
Attached Files:

Notes
smithkm    08-25-04 16:16	The software has all been updated, a modular 2.4.27 kernel was built with genkernel as follows: genkernel --no-mountboot --no-clean --no-mrproper \ --no-bootsplash --install --bootloader=grub all The build was tested on a machine and it was revealed that OpenAFS needed to be rebuilt in order to add support for 2.4.27. Additionally, the keyboard and mouse were unresponsive once the machine did finally come up. A machine is now syncing so we'll see if AFS works now.
smithkm    09-01-04 20:49	There are issues when loading the network driver in the ITL. Additionally, the custom icons on the desktop keep overlapping and should be rearranged. Ruslan may be taking over as maintainer.
guest    09-13-04 00:39	I tried to fix it. After hours of work, I could not find the source of problem. ------- Rouslan
guest    09-15-04 22:08	I fixed it! Here are the steps: 1)Disable acpi. To do this: mount /boot, edit /boot/grub/grub.conf, add option "acpi=no" to the kernel line. 2)Disable hotplugging and alsasound. To do this: rc-update del hotplug itl boot, rc-update del alsasound itl. 3)Make network and sound modules load automatically at boot. To do this: edit /etc/modules.autoload.d/kernel-2.4, add a line "3c59x" for network, and add a line "es1371" for sound. 4)Enable esound. To do this: rc-update add esound itl. Woohooo!!! ------- Rouslan
solomarv    10-09-04 16:40	All lab machines except # 18, 22, and 28 are updated. 22 is in use. 18 and 28 fail to boot because of filesystem corruption (bug 0000208). edited on: 10-10-04 00:58
solomarv    10-10-04 13:44	While working on "unstable" lab-build, I have noticed that rc.conf sets time to UTC. That could've been causing the problem with clock being off. I changed UTC to local, but `rdate -s time.nist.gov` is still in /etc/conf.d/local.start.
solomarv    10-12-04 19:26	Machine 22 is no longer in use, it has been updated. As of now, all machines have "unstable" lab-build, which happens to be stable.

Viewing Issue Advanced Details
ID:	Category:	Severity:	Reproducibility:	Date Submitted:	Last Update:
199	[Lab Management]	block	always	09-14-04 12:47	09-14-04 12:48
Reporter:	smithkm	Platform:
Assigned To:	smithkm	OS:
Priority:	high	OS Version:
Status:	feedback	Product Version:
Product Build:		Resolution:	reopened
Projection:	none
ETA:	none
Summary:	develop docs for making auto-install CDs
Description:	The only person that knew how to make them was Ralf...
Steps To Reproduce:
Additional Information:	Ralf just sent me the docs.
Attached Files:	0000199-cosi-auto-install_howto.txt (2 KB) 12-31-69 19:33

Notes
smithkm    09-14-04 12:47	Docs attached.
smithkm    09-14-04 12:48	Ralf will be sending additional docs for doing CDs based on 2004.1 and 2004.2 (current docs only work with 1.4).

Viewing Issue Advanced Details
ID:	Category:	Severity:	Reproducibility:	Date Submitted:	Last Update:
196	[Web Services]	block	always	08-25-04 16:12	09-01-04 20:48
Reporter:	smithkm	Platform:
Assigned To:	smithkm	OS:
Priority:	immediate	OS Version:
Status:	closed	Product Version:
Product Build:		Resolution:	fixed
Projection:	none
ETA:	none
Summary:	fix waldorf
Description:	waldorf will not boot
Steps To Reproduce:
Additional Information:
Attached Files:

Notes
smithkm    08-25-04 16:18	The Open Firmware on waldorf didn't appear to have the correct boot-device (it was set to "a"). Changed the option with: setenv boot-device disk Then found that SILO couldn't locate the correct root partition. It was trying /dev/sda4 when it should be /dev/hda4. Needed to append "root=/dev/hda4" to the end of the kernel args.
smithkm    08-25-04 16:19	Also removed the two static IP aliases so they wouldn't conflict with statler. It looks like some services could be moved back to waldorf, pending some tests to make sure it will continue to boot properly (the root=/dev/hda4 option still needs to be added to the silo config file so it's persistent).
smithkm    09-01-04 20:48	machine is now up. services still need to be migrated to it.