ID |
Date |
Icon |
Author |
Author Email |
Category |
OS |
ELOG Version |
Subject |
69862
|
Tue Jan 7 20:35:23 2025 |
| Evinrude Motor | minsonj2016@gmail.com | Bug report | Linux | elog-3.1.5-1 | Re: Segfault on elog-3.1.5-1 when uploading file. |
When will the new source be in the standard download area ? I'm on ubuntu .
gary holman wrote: |
Thanks Stefen!
I built from source (ELOG V3.1.5-3a5f2f00) and I confirmed as fixed.
Stefan Ritt wrote: |
Thanks to your stack trace, I found a case where a string might get overwritten, but only if the attachment file name is longer than 256 chars. I fixed the code and made a new RPM:
https://www.dropbox.com/scl/fi/r37qx9aka5ytt3j7vn4km/elog-3.1.5-20241213.el8.x86_64.rpm?rlkey=knct99pdltggunrbmyr2hpfe5&st=pkre24aq&dl=0
Alternatively, you can compile from sources. Give it a try.
Stefan
|
|
|
69863
|
Tue Jan 7 20:41:13 2025 |
| Stefan Ritt | It i | Bug report | Linux | elog-3.1.5-1 | Re: Segfault on elog-3.1.5-1 when uploading file. |
It is in the usual download area which is referenced at https://elog.psi.ch/elog/download.html
Stefan
Evinrude Motor wrote: |
When will the new source be in the standard download area ? I'm on ubuntu .
gary holman wrote: |
Thanks Stefen!
I built from source (ELOG V3.1.5-3a5f2f00) and I confirmed as fixed.
Stefan Ritt wrote: |
Thanks to your stack trace, I found a case where a string might get overwritten, but only if the attachment file name is longer than 256 chars. I fixed the code and made a new RPM:
https://www.dropbox.com/scl/fi/r37qx9aka5ytt3j7vn4km/elog-3.1.5-20241213.el8.x86_64.rpm?rlkey=knct99pdltggunrbmyr2hpfe5&st=pkre24aq&dl=0
Alternatively, you can compile from sources. Give it a try.
Stefan
|
|
|
|
69872
|
Sun Apr 13 13:56:05 2025 |
| Evinrude Motor | minsonj2016@gmail.com | Bug report | Linux | elog-3.1.5-1 | Re: Segfault on elog-3.1.5-1 when uploading file. |
So this never made it into the download area ? elog-latest.tar is elog-3.1.5-1 and contains no files from 2024 or 2025 .
Thanks
Stefan Ritt wrote: |
It is in the usual download area which is referenced at https://elog.psi.ch/elog/download.html
Stefan
Evinrude Motor wrote: |
When will the new source be in the standard download area ? I'm on ubuntu .
gary holman wrote: |
Thanks Stefen!
I built from source (ELOG V3.1.5-3a5f2f00) and I confirmed as fixed.
Stefan Ritt wrote: |
Thanks to your stack trace, I found a case where a string might get overwritten, but only if the attachment file name is longer than 256 chars. I fixed the code and made a new RPM:
https://www.dropbox.com/scl/fi/r37qx9aka5ytt3j7vn4km/elog-3.1.5-20241213.el8.x86_64.rpm?rlkey=knct99pdltggunrbmyr2hpfe5&st=pkre24aq&dl=0
Alternatively, you can compile from sources. Give it a try.
Stefan
|
|
|
|
|
69873
|
Thu Apr 17 13:10:43 2025 |
| Stefan Ritt | stefan.ritt@psi.ch | Bug report | Linux | elog-3.1.5-1 | Re: Segfault on elog-3.1.5-1 when uploading file. |
I stopped making tar files, since most people building elog from sources just pull it from the bitbucket repository:
$ git clone https://bitbucket.org/ritt/elog --recursive
$ cd elog
$ mkdir build; cd build;
$ cmake ..; make
Evinrude Motor wrote: |
So this never made it into the download area ? elog-latest.tar is elog-3.1.5-1 and contains no files from 2024 or 2025 .
Thanks
Stefan Ritt wrote: |
It is in the usual download area which is referenced at https://elog.psi.ch/elog/download.html
Stefan
Evinrude Motor wrote: |
When will the new source be in the standard download area ? I'm on ubuntu .
gary holman wrote: |
Thanks Stefen!
I built from source (ELOG V3.1.5-3a5f2f00) and I confirmed as fixed.
Stefan Ritt wrote: |
Thanks to your stack trace, I found a case where a string might get overwritten, but only if the attachment file name is longer than 256 chars. I fixed the code and made a new RPM:
https://www.dropbox.com/scl/fi/r37qx9aka5ytt3j7vn4km/elog-3.1.5-20241213.el8.x86_64.rpm?rlkey=knct99pdltggunrbmyr2hpfe5&st=pkre24aq&dl=0
Alternatively, you can compile from sources. Give it a try.
Stefan
|
|
|
|
|
|
239
|
Wed Feb 26 10:34:12 2003 |
| Stefan Ritt | stefan.ritt@psi.ch | Comment | | | Re: Security (passwords over web browser) |
> Stefan - Just to say that this is an excellent piece of work well done.
Thanks.
> 1) is there a way around seeing the password in text when self
regestering,
> if I turn this option off when the user changes his password will this
> password still be seen?
Where did you see the password? Was it on this logbook or on your own? Did
you use "self register" equal 3 or 2? The password should never be visible
in plain text, so after you submit it (during registration or login), the
page gets immediately redirected since the password is contained in the
URL. After the redirection, it is not visible any more. Now it might happen
that the redirection takes a few seconds, depending on the network speed,
then you see it for this few seconds. But in an intranet installation, this
should not happen.
> 2) I have changed all the files to be owned on my RedHat Server by the
> user:group as elog:elog and set and moved the logbooks to another
directory
> other than in /usr/local/elog namely /home/elog/logbooks, my concern is
is
> I was to upgrade to a newer version would it be a simple install over the
> top? any caveats?
Yes, if you upgrade, the new version will again to into /usr/local/elog
unless you tell "rpm" to relocate the package. Unfortunately I'm not a
specialist with "rpm", but you might figure it out yourself (just try to
reinstall the same version and look where the files go wiht "rpm -ql elog"). |
2088
|
Wed Nov 22 02:55:48 2006 |
| Rob Mahurin | rob@utk.edu | Comment | Linux | 2.5.7-1 | Re: Securing Elog with SSL and Apache |
Hi,
I am an apache ignoramus who has been trying to follow these instructions on a Debian 3.1 box. I got hung up for
the following reason. I had to explicitly enable some apache features, which was a simple matter of making the
following symlinks in /etc/apache2/mods-enabled:
proxy.conf -> ../mods-available/proxy.conf
proxy.load -> ../mods-available/proxy.load
rewrite.load -> ../mods-available/rewrite.load
headers.load -> ../mods-available/headers.load
ssl.conf -> ../mods-available/ssl.conf
ssl.load -> ../mods-available/ssl.load
Easy enough. The default proxy.conf has sensible-looking warnings about not running your server as an open proxy.
However, I wasn't able to tweak it to encrypted port forwarding from :443 to :8079.
What I've done that works is to add a local proxy section to the /etc/apache2/conf.d/elogredirect.conf by Damon
Nettles:
<VirtualHost *:443>
### ... everything else
<Proxy *>
Allow from all
</Proxy>
</VirtualHost>
I think, since this is in a subsection, that it only affects that virtual host. But it'd be nice if someone who
actually understands this language would reassure me that I'm not setting myself up for some security hole. At
any rate it took me long enough to figure this out that I thought I'd post a note in public, and this seems like
the forum to do so.
Thanks.
Rob |
66902
|
Wed Sep 15 00:32:48 2010 |
| Stefan Ritt | stefan.ritt@psi.ch | Question | Linux | All | 2.8.0-2313 | Re: Searching Logbooks |
> Hi Stefan,
>
> I'm starting to get a similar problem to Lance's ("SQL Database"). Searching is beginning to take time.
>
> In searching, I either can search one logbook (still relatively quick), or all of them.
>
> I have my logbooks in groups, and often I know which group I want to search, and it would make the searching
> much quicker were the search confined to just that group. I don't think I've missed anything in the
> documentation on this matter.
>
> If not a change to the elog program, is there another way of (say) arranging the logbooks that will achieve this?
You can't do that right now. I would have to extend the functionality to allow searching in groups. Also have a look
at https://midas.psi.ch/elogs/Forum/66901. Maybe that helps a bit in meantime. |
66906
|
Wed Sep 15 01:54:56 2010 |
| David Pilgram | David.Pilgram@epost.org.uk | Question | Linux | All | 2.8.0-2313 | Re: Searching Logbooks |
Hi Stefan,
I was rather hoping that was *not* going to be your answer.
I much prefer the plain ascii file format, for it allows me to edit it for "mistakes" post submission,
shall we say.
> > Hi Stefan,
> >
> > I'm starting to get a similar problem to Lance's ("SQL Database"). Searching is beginning to take time.
> >
> > In searching, I either can search one logbook (still relatively quick), or all of them.
> >
> > I have my logbooks in groups, and often I know which group I want to search, and it would make the searching
> > much quicker were the search confined to just that group. I don't think I've missed anything in the
> > documentation on this matter.
> >
> > If not a change to the elog program, is there another way of (say) arranging the logbooks that will achieve this?
>
> You can't do that right now. I would have to extend the functionality to allow searching in groups. Also have a look
> at https://midas.psi.ch/elogs/Forum/66901. Maybe that helps a bit in meantime. |