[Fedora Infrastructure] #2527: Outage - blogs.fedoraproject.org

[fedora-badges]

#2527: Outage - blogs.fedoraproject.org
-------------------------+--------------------------------------------------
 Reporter:  ricky        |       Owner:  webmaster
     Type:  outage       |      Status:  new      
 Priority:  major        |   Milestone:  Fedora 15
Component:  Web Content  |     Version:           
 Severity:  Normal       |    Keywords:           
-------------------------+--------------------------------------------------
 = phenomenon =
 blogs.fedoraproject.org has currently been preemptively taken down due to
 known security issues in our current version of wordpress.

 = recommendation =
 Update wordpress-mu or find a hotfix for this and any other known issues.

-- 
Ticket URL: <https://fedorahosted.org/fedora-infrastructure/ticket/2527>
Fedora Infrastructure <http://fedoraproject.org/wiki/Infrastructure>
Fedora Infrastructure Project for Bugs, feature requests and access to our source code.

[fedora-badges]

#2527: Outage - blogs.fedoraproject.org
-------------------------+--------------------------------------------------
 Reporter:  ricky        |        Owner:  webmaster
     Type:  outage       |       Status:  new      
 Priority:  major        |    Milestone:  Fedora 15
Component:  Web Content  |      Version:           
 Severity:  Normal       |   Resolution:           
 Keywords:               |  
-------------------------+--------------------------------------------------
Comment (by ricky):

 The bug in question is http://bugs.debian.org/cgi-
 bin/bugreport.cgi?bug=605603 (blog authors can perform SQL injection).

 I've filed bugzilla bugs
 https://bugzilla.redhat.com/show_bug.cgi?id=664873 and
 https://bugzilla.redhat.com/show_bug.cgi?id=664886 to the wordpress-mu and
 wordpress packages.

-- 
Ticket URL: <https://fedorahosted.org/fedora-infrastructure/ticket/2527#comment:1>
Fedora Infrastructure <http://fedoraproject.org/wiki/Infrastructure>
Fedora Infrastructure Project for Bugs, feature requests and access to our source code.

[fedora-badges]

#2527: Outage - blogs.fedoraproject.org
-------------------------+--------------------------------------------------
 Reporter:  ricky        |        Owner:  webmaster
     Type:  outage       |       Status:  closed   
 Priority:  major        |    Milestone:  Fedora 15
Component:  Web Content  |      Version:           
 Severity:  Normal       |   Resolution:  fixed    
 Keywords:               |  
-------------------------+--------------------------------------------------
Changes (by ricky):

  * status:  new => closed
  * resolution:  => fixed

Comment:

 This outage is now over, the db logs confirm that apart from our testing,
 the vulnerabilities were never exploited on our instance.

-- 
Ticket URL: <https://fedorahosted.org/fedora-infrastructure/ticket/2527#comment:2>
Fedora Infrastructure <http://fedoraproject.org/wiki/Infrastructure>
Fedora Infrastructure Project for Bugs, feature requests and access to our source code.