Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 761 of 808  Not logged in ELOG logo
ID Date Icon Author Author Email Categorydown OS ELOG Version Subject
  69636   Tue Jan 31 17:40:22 2023 Warning Frank HeyrothnoBug reportLinux3.1.5-1*.cxx files missing in elog-3.1.5-1.tar.gz
I downloaded the last elog-3.1.5-1.tar.gz to install elog.

All *.cxx files are missing.
  69646   Tue Feb 7 12:51:54 2023 Question Cryptagecryptage@hotmail.frBug reportLinux3.1.53.1.5 - Mass edit bug + Wrong version

Hi,

I've just installed the news 3.1.5 version and I have 2 problems.
I don't know if it works with older versions because I started with latest.

- When using "select" menu then "edit" for multiple entries, the text is replaced with "- keep original text here -" instead of keeping the original values. Really annoying...







Another problem too, if I want to edit after, I have the error message "only author - keep original text here - can edit" although the author column is OK..
It looks like this problem is global and not only on text column.




- Version number is indicated "ELOG V3.1.4" instead of V3.1.5.

My config file :

[global]
port = 8888
language = french
Authentication = Webserver
Page title = XXXXX
SSL = 0
Interface = 127.0.0.1
URL = https://elog.xxxxxx.xxx/
Usr = elog
Grp = elog
Logfile = /var/log/elog.log
Logging level = 3
Self register = 0
Password file = xxxx.xxx
Logout to main = 0
Max content length = 10485760
List after submit = 1
Search all logbooks = 0
Refresh = 300
Show last default = 7

[Technique]
Theme = custom
Menu commands = List, New, Edit, Reply, Find
List Menu commands =  List, New, Find, Select, Config
Guest menu commands = Login
Admin user = xxxxxx
Login user = xxxx, xxxxx, xxxxxx
Restrict edit = 1
Restrict edit time = 1
Login expiration = 2
Allow password change = 0
Comment = Test suivi technique
Attributes = Auteur, Intervenant, Quand, Objet, Categorie, Centre, Statut
Type Quand = date
Date format = %d/%m/%Y
Options Intervenant = xxxxxxxxxxx, Autre
Options Centre = xxxxxxxx, Autre
Options Categorie = xxxxxxxx, Autre
Options Statut = A faire, En cours, En attente, Termine, Autre
Extendable Options = Categorie, Intervenant
Required Attributes = Intervenant
Page Title = ELOG - $Categorie
Reverse sort = 1
Quick filter = Categorie, Centre
Preset Auteur = $long_name
Option Auteur = Filled In Automatically
Locked Attributes = Auteur
Use lock = 1

I'm using Apache as reverse proxy with SSL and transparent Kerberos authentication (Microsoft Active Directory).
URL via Apache is https://elog.xxxxxx.xxx (no subdirectory).

Thanks for your help.

  69647   Tue Feb 7 16:21:37 2023 Reply Stefan RittI chstefan.ritt@psi.chBug reportLinux3.1.5Re: 3.1.5 - Mass edit bug + Wrong version

I checked and found that the bug which removed the main text was there since the beginning, but it's only triggered if you switch elog to French, it doesn't happen in the English version. I changed a bit the text processing so now it should work also in the French version.

I also changed the version number which is shown at the bottom to 3.1.5.

Stefan

  69648   Tue Feb 7 17:31:20 2023 Reply Cryptagecryptage@hotmail.frBug reportLinux3.1.5Re: 3.1.5 - Mass edit bug + Wrong version

Thanks for your prompt help.
It looks good for text but I still have problem with "select" function (even in English).

If I use "select" menu :
- When multiple values are selected it indicates "only user - keep original values - can edit" (freshly created).




- When a single value is selected, it indicates "only user XXX can edit" where XXX is my truncated name (the first 4 letters).



After editing in with admin account the author is now my truncated name :



If I want to edit a single entry (without select menu) it works perfectly.

Thanks.
 

Stefan Ritt wrote:

I checked and found that the bug which removed the main text was there since the beginning, but it's only triggered if you switch elog to French, it doesn't happen in the English version. I changed a bit the text processing so now it should work also in the French version.

I also changed the version number which is shown at the bottom to 3.1.5.

Stefan

 

  69649   Tue Feb 7 20:45:31 2023 Reply Stefan RittIf itstefan.ritt@psi.chBug reportLinux3.1.5Re: 3.1.5 - Mass edit bug + Wrong version

If it works with a simple edit, then why don't you use that one to edit individual values. I checked and version 3.1.4 had already the same problem, so it was not newly introduced. I would have to invest a couple of hours to fix this issue correcly, which I simply don't have right now.

  69650   Wed Feb 8 10:05:03 2023 Reply CryptageThgacryptage@hotmail.frBug reportLinux3.1.5Re: 3.1.5 - Mass edit bug + Wrong version

Thanks !

Sometime I need to edit multiple values to add a new choice.
By exemple, if I add a new column "status" (open, closed...) , it's mandatory to use select menu to add the new value to existent entries.

With a lot of lines it's not possible to edit one by one.

Stefan Ritt wrote:

If it works with a simple edit, then why don't you use that one to edit individual values. I checked and version 3.1.4 had already the same problem, so it was not newly introduced. I would have to invest a couple of hours to fix this issue correcly, which I simply don't have right now.

 

  69693   Fri Sep 15 21:42:38 2023 Entry Konstantin Olchanskiolchansk@triumf.caBug reportOtherlatestupdate elog downloads page
The elog downloads page is slightly out of date, https://elog.psi.ch/elog/download.html

1) the "git clone" instructions work (but there is no git tags corresponding to different releases, I suggest adding test: "elog developers 
recommend always using latest version from elog git repository").

2) "elog source code", recommends downloading tar file, but latest tar file is from February 2023, probably out of date. people who can compile elog 
from sources can do "git clone", is the "tar" method still relevant?

3) windows binaries, latest available is from 2018, before the famous security fixes, probably no longer safe for running on the open internet. I 
suggest we remove this section and say "sorry, windows binaries no longer available".

4) linux binaries, all links are dead, and we have requested removal of elog packages from red hat, debian and ubuntu. (and they have been removed).

K.O.
  69695   Mon Sep 18 13:49:05 2023 Angy Heinz Junkesjunkes@fhi-berlin.mpg.deBug reportLinuxelogd 3.1.4elog server crashed due to cookies send by client

Our elog instance (elogd 3.1.4 built Jan 13 2021, 20:44:20 revision ce2a48e9) has been running for years without any problems.

We have a new user who consistently crashes the elog:

GET /Omicron-STM-XPS/?rsort=Record%20date HTTP/1.1
Host: elog.fhi-berlin.mpg.de:4821
Cache-Control: max-age=0
DNT: 1
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-gpc: 1
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
Referer: https://elog.fhi-berlin.mpg.de/elog/isc/Omicron-STM-XPS/
Accept-Encoding: gzip, deflate, br
Accept-Language: el-GR,el;q=0.9,en;q=0.8
Cookie: ufnm=Sotirios Tsatsos; urem=1; elmode=full; elattach=1; sid=CD2B04E2C3F02EA4; googtrans=/en/en; amp_6e403e=aWS6RQd5UjGctj5Ym_cDzA.c2Fsdm9fc290b2thaXRlbkB5YWhvby5jb20=..1hajnscc0.1hajnscc0.0.ac.ac
X-Forwarded-For: 141.14.151.26
X-Forwarded-Host: elog.fhi-berlin.mpg.de
X-Forwarded-Server: elog.fhi-berlin.mpg.de
Connection: Keep-Alive


Received unknown cookie "googtrans"
Received unknown cookie "amp_6e403e"
*** buffer overflow detected ***: terminated
Abort (core dumped)

ELOG V3.1.5-3fb85fa6