Debian has issued an advisory on July 16: https://www.debian.org/security/2023/dsa-5454 The issue is fixed upstream in 1.2.31: https://github.com/kanboard/kanboard/security/advisories/GHSA-9gvq-78jp-jxcx Mageia 8 is also affected.
Status comment: (none) => Fixed upstream in 1.2.31Whiteboard: (none) => MGA8TOO
Little activity on this, various packagers, so assigning globally.
Assignee: bugsquad => pkg-bugs
Removing Mageia 8 from whiteboard due to EOL!
CC: (none) => geiger.david68210Whiteboard: MGA8TOO => MGA9TOO
CC: (none) => yvesbrungardAssignee: pkg-bugs => qa-bugsSource RPM: kanboard-1.0.8-6.mga9.src.rpm => kanboardVersion: Cauldron => 9Whiteboard: MGA9TOO => (none)Status comment: Fixed upstream in 1.2.31 => (none)
SRPM: kanboard-1.2.42-1.mga9 RPMS: kanboard-1.2.42-1.mga9.noarch
CVE: (none) => CVE-2023-36813
Keywords: (none) => advisory
Out of my league here, just can test clean installation LC_ALL=C urpmi --auto --auto-update medium "QA Testing (64-bit)" is up-to-date medium "Core Release (distrib1)" is up-to-date medium "Core Updates (distrib3)" is up-to-date medium "Nonfree Release (distrib11)" is up-to-date medium "Nonfree Updates (distrib13)" is up-to-date medium "Tainted Release (distrib21)" is up-to-date medium "Tainted Updates (distrib23)" is up-to-date medium "Core 32bit Release (distrib31)" is up-to-date medium "Core 32bit Updates (distrib32)" is up-to-date medium "Nonfree 32bit Release (distrib36)" is up-to-date medium "Nonfree 32bit Updates (distrib37)" is up-to-date medium "Tainted 32bit Release (distrib41)" is up-to-date medium "Tainted 32bit Updates (distrib42)" is up-to-date installing kanboard-1.2.42-1.mga9.noarch.rpm from //home/katnatek/qa-testing/x86_64 Preparing... ################################################################################################## 1/1: kanboard ################################################################################################## 1/1: removing kanboard-1.0.8-6.mga9.noarch ################################################################################################## systemctl restart httpd.service http://localhost/kanboard/ Internal Error: This PHP extension is required: "gd" Install php-gd http://localhost/kanboard/ Internal Error: This PHP extension is required: "ctype" Install php-ctype http://localhost/kanboard/ Internal Error: This PHP extension is required: "filter" Install php-filter http://localhost/kanboard/ Internal Error: This PHP extension is required: "dom" Install php-dom Finally, I could get the Sign in page papoteur please add php-gd, php-ctype, php-filter & php-dom as requires
Submitting: SRPMS: kanboard-1.2.42-1.1.mga9 RPMS: kanboard-1.2.42-1.1.mga9.noarch
The last submission adds requirements. I presume that the application is accessible through http://localhost/kanboard
MGA9-64 Plasma Wayland on HP-Pavillion No installation issues. Following papoteur I guessed httpd has to run. Then the link brings to a login screen. Found info at https://docs.kanboard.org/v1/admin/installation logged in with default and was able to open a new project and a new task in it. Seems to work OK.
CC: (none) => herman.viaeneWhiteboard: (none) => MGA9-64-OK
As additional test LC_ALL=C urpmi kanboard To satisfy dependencies, the following packages are going to be installed: Package Version Release Arch (medium "Core Release (distrib1)") kanboard 1.0.8 6.mga9 noarch (medium "Core Updates (distrib3)") php-mbstring 8.2.25 1.mga9 x86_64 php-pdo 8.2.25 1.mga9 x86_64 php-pdo_sqlite 8.2.25 1.mga9 x86_64 4.1MB of additional disk space will be used. 1.3MB of packages will be retrieved. Proceed with the installation of the 4 packages? (Y/n) y https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/kanboard-1.0.8-6.mga9.noarch.rpm https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/updates/php-pdo-8.2.25-1.mga9.x86_64.rpm https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/updates/php-mbstring-8.2.25-1.mga9.x86_64.rpm https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/updates/php-pdo_sqlite-8.2.25-1.mga9.x86_64.rpm installing php-pdo_sqlite-8.2.25-1.mga9.x86_64.rpm php-mbstring-8.2.25-1.mga9.x86_64.rpm kanboard-1.0.8-6.mga9.noarch.rpm php-pdo-8.2.25-1.mga9.x86_64.rpm from /var/cache/urpmi/rpms Preparing... ################################################################################################## 1/4: php-pdo ################################################################################################## 2/4: php-pdo_sqlite ################################################################################################## 3/4: php-mbstring ################################################################################################## 4/4: kanboard ################################################################################################## LC_ALL=C urpmi --auto --auto-update medium "QA Testing (64-bit)" is up-to-date medium "Core Release (distrib1)" is up-to-date medium "Core Updates (distrib3)" is up-to-date medium "Nonfree Release (distrib11)" is up-to-date medium "Nonfree Updates (distrib13)" is up-to-date medium "Tainted Release (distrib21)" is up-to-date medium "Tainted Updates (distrib23)" is up-to-date medium "Core 32bit Release (distrib31)" is up-to-date medium "Core 32bit Updates (distrib32)" is up-to-date medium "Nonfree 32bit Release (distrib36)" is up-to-date medium "Nonfree 32bit Updates (distrib37)" is up-to-date medium "Tainted 32bit Release (distrib41)" is up-to-date medium "Tainted 32bit Updates (distrib42)" is up-to-date https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/updates/php-dom-8.2.25-1.mga9.x86_64.rpm https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/updates/php-gd-8.2.25-1.mga9.x86_64.rpm https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/updates/php-filter-8.2.25-1.mga9.x86_64.rpm https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/updates/php-ctype-8.2.25-1.mga9.x86_64.rpm installing //home/katnatek/qa-testing/x86_64/kanboard-1.2.42-1.1.mga9.noarch.rpm /var/cache/urpmi/rpms/php-ctype-8.2.25-1.mga9.x86_64.rpm /var/cache/urpmi/rpms/php-filter-8.2.25-1.mga9.x86_64.rpm /var/cache/urpmi/rpms/php-gd-8.2.25-1.mga9.x86_64.rpm /var/cache/urpmi/rpms/php-dom-8.2.25-1.mga9.x86_64.rpm Preparing... ################################################################################################## 1/5: php-dom ################################################################################################## 2/5: php-gd ################################################################################################## 3/5: php-filter ################################################################################################## 4/5: php-ctype ################################################################################################## 5/5: kanboard ################################################################################################## 1/1: removing kanboard-1.0.8-6.mga9.noarch ################################################################################################## systemctl restart httpd.service http://localhost/kanboard now loads OK With the test in comment#7 and this should be enough
CC: (none) => andrewsfarm
IMO this package need better description to get user easily able to use it. 1) I think it should clearly say it need apache web server and will install it as a dependency. (Some users may not ant that complexity.) 2) the old URL http://www.kanboard.net should be updated to https://kanboard.org/ 3) Some minimal info how to start it (systemctl restart httpd.service) and whatever more is needed, (link to a *good simple* description upstream? and to surf to http://localhost/kanboard/ --- Clean install using drakrpm, testing media enabled Then: $ sudo systemctl restart httpd.service Surfing to http://localhost/kanboard/ returns access denied. (need to fix owner of data dir?)
CC: (none) => fri
/usr/share/kanboard/data is owned by apache. So what is missing?
(In reply to Morgan Leijström from comment #10) > /usr/share/kanboard/data is owned by apache. > So what is missing? As Herman and I not have issues I think could be the initial configuration of apache, I use MCC for that and perhaps Herman too
Could be. Here, apache was not installed before. I just selected kanboard in drakrpm and it installed (from rpm -qa --last): php8.3-session-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:27 php8.3-cgi-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:27 kanboard-1.2.42-1.1.mga9.noarch tor 21 nov 2024 14:02:27 webserver-base-2.0-16.mga9.noarch tor 21 nov 2024 14:02:26 php8.3-sysvsem-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 php8.3-pdo_sqlite-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 php8.3-pdo-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 php8.3-mbstring-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 php8.3-ini-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 php8.3-gd-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 php8.3-filter-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 php8.3-dom-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 php8.3-ctype-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 apache-2.4.62-1.mga9.x86_64 tor 21 nov 2024 14:02:26 php8.3-zlib-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:25 php8.3-sysvshm-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:25 php8.3-openssl-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:25 php8.3-cli-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:25
(In reply to Morgan Leijström from comment #12) > Could be. > Here, apache was not installed before. > I just selected kanboard in drakrpm and it installed > (from rpm -qa --last): > > php8.3-session-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:27 > php8.3-cgi-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:27 > kanboard-1.2.42-1.1.mga9.noarch tor 21 nov 2024 14:02:27 > webserver-base-2.0-16.mga9.noarch tor 21 nov 2024 14:02:26 > php8.3-sysvsem-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 > php8.3-pdo_sqlite-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 > php8.3-pdo-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 > php8.3-mbstring-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 > php8.3-ini-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 > php8.3-gd-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 > php8.3-filter-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 > php8.3-dom-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 > php8.3-ctype-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:26 > apache-2.4.62-1.mga9.x86_64 tor 21 nov 2024 14:02:26 > php8.3-zlib-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:25 > php8.3-sysvshm-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:25 > php8.3-openssl-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:25 > php8.3-cli-8.3.13-1.mga9.x86_64 tor 21 nov 2024 14:02:25 Check if you have apache-mod_php or php-fpm-apache for php8.3
Neither. BUT!! php8.3 ?? i got that version as dep of kanboard. Thank you for opening my eyes! There is apparantly a bug in drakrpm, installing php8.3 packages from the disabled backport repo, in comment 12, where I just accepted all deps of kanboard. I now removed all php8.3*, and when i tell drakrpm i want php-session, i get correctly: - php-cgi-8.2.25-1.mga9.x86_64 - php-ini-8.2.25-1.mga9.x86_64 - php-openssl-8.2.25-1.mga9.x86_64 - php-session-8.2.25-1.mga9.x86_64 - php-sysvsem-8.2.25-1.mga9.x86_64 - php-sysvshm-8.2.25-1.mga9.x86_64 - php-zlib-8.2.25-1.mga9.x86_64 And install them. But if I now tell drakrpm i want kanboard it want to get all the php8.3 packages, that is true for both kanboard 1.0.8 and 1.2.42. backport repos are disabled already, but after I *remove* them, it is OK. ------------- Back to start, removed core/backport repo and redo install, it works: Removed all php packages, kanboard, apache, webserver-base and start over: 18 packages: - apache-2.4.62-1.mga9.x86_64 - apache-mod_php-8.2.25-1.mga9.x86_64 - kanboard-1.2.42-1.1.mga9.noarch - php-cli-8.2.25-1.mga9.x86_64 - php-ctype-8.2.25-1.mga9.x86_64 - php-dom-8.2.25-1.mga9.x86_64 - php-filter-8.2.25-1.mga9.x86_64 - php-gd-8.2.25-1.mga9.x86_64 - php-ini-8.2.25-1.mga9.x86_64 - php-mbstring-8.2.25-1.mga9.x86_64 - php-openssl-8.2.25-1.mga9.x86_64 - php-pdo-8.2.25-1.mga9.x86_64 - php-pdo_sqlite-8.2.25-1.mga9.x86_64 - php-session-8.2.25-1.mga9.x86_64 - php-sysvsem-8.2.25-1.mga9.x86_64 - php-sysvshm-8.2.25-1.mga9.x86_64 - php-zlib-8.2.25-1.mga9.x86_64 - webserver-base-2.0-16.mga9.noarch $ sudo systemctl restart httpd.service http://localhost/kanboard/ shows a login dialogue default login and password is admin/admin I created a project, and clicked around a bit. So this package is OK (minus maybe the info, comment 9) We thought the backport issue was solved in Bug 31208 I will reopen it with this bug as example.
Thank you, Morgan. Validating.
CC: (none) => sysadmin-bugsKeywords: (none) => validated_update
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2024-0366.html
Status: NEW => RESOLVEDResolution: (none) => FIXED
Addendum: for others trying this (or writing install documentation) you may want kanban/apache to be running automatically after reboot. One way is to in MCC -> System - Services -> checkmark httpd to be started at boot.