<html theme="default-light"><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head><body text="#000000">James,<span></span><br>
<blockquote type="cite" cite="mid:20200430002035.GH19601@laptop.org"
style="border: 0px none ! important;">
<div xmlns="http://www.w3.org/1999/xhtml" class="__pbConvHr"
style="margin:30px 25px 10px 25px;"><div
style="width:100%;border-top:2px solid
rgba(146,154,163,0.7);padding-top:10px;"> <div
style="display:inline-block;white-space:nowrap;vertical-align:middle;width:49%;">
<a style="color:#485664
!important;padding-right:6px;font-weight:500;text-decoration:none
!important;" href="mailto:quozl@laptop.org" moz-do-not-send="true">James
Cameron</a></div> <div
style="display:inline-block;white-space:nowrap;vertical-align:middle;width:48%;text-align:
right;"> <font color="#909AA4"><span style="padding-left:6px">April
29, 2020 at 5:20 PM</span></font></div> </div></div>
<div xmlns="http://www.w3.org/1999/xhtml" class="__pbConvBody"
__pbrmquotes="true"
style="color:#909AA4;margin-left:24px;margin-right:24px;"><pre wrap="">Thanks Alex.
I'm in even worse situation with wiki.laptop.org, and last looked into
this in December 2018, so I don't think I can be of any help. What
blocked my upgrade was use of the Semantic MediaWiki plugin, but I
don't know if Sugar Labs Wiki is using that.</pre></div>
</blockquote>
Thanks. We do not appear to be using Semantic MediaWiki on the Sugar
Labs wiki, though we are using two-dozen other extensions. <br>
<br>
It does look like there's a current version of Semantic Mediawiki,
3.1.6, released April 19 of this year:<br>
<a class="moz-txt-link-freetext" href="https://www.semantic-mediawiki.org/wiki/Semantic_MediaWiki_3.1.6_released">https://www.semantic-mediawiki.org/wiki/Semantic_MediaWiki_3.1.6_released</a><br>
<blockquote type="cite" cite="mid:20200430002035.GH19601@laptop.org"
style="border: 0px none ! important;">
<div xmlns="http://www.w3.org/1999/xhtml" class="__pbConvBody"
__pbrmquotes="true"
style="color:#909AA4;margin-left:24px;margin-right:24px;">
<pre wrap="">
Here's my list of links in my notes of the day.
<a class="moz-txt-link-freetext" href="https://www.mediawiki.org/wiki/Manual:Running_MediaWiki_on_Debian_or_Ubuntu">https://www.mediawiki.org/wiki/Manual:Running_MediaWiki_on_Debian_or_Ubuntu</a>
<a class="moz-txt-link-freetext" href="https://www.mediawiki.org/wiki/Manual:Moving_a_wiki">https://www.mediawiki.org/wiki/Manual:Moving_a_wiki</a>
<a class="moz-txt-link-freetext" href="https://www.mediawiki.org/wiki/Manual:Backing_up_a_wiki">https://www.mediawiki.org/wiki/Manual:Backing_up_a_wiki</a>
<a class="moz-txt-link-freetext" href="https://www.mediawiki.org/wiki/Manual:Upgrading#How_do_I_upgrade_from_a_really_old_version?_In_one_step,_or_in_several_steps">https://www.mediawiki.org/wiki/Manual:Upgrading#How_do_I_upgrade_from_a_really_old_version?_In_one_step,_or_in_several_steps</a>?
<a class="moz-txt-link-freetext" href="https://www.semantic-mediawiki.org/wiki/Semantic_MediaWiki">https://www.semantic-mediawiki.org/wiki/Semantic_MediaWiki</a>
On Wed, Apr 29, 2020 at 05:08:59PM -0700, Alex Perez wrote:
</pre>
<blockquote type="cite"><pre wrap="">on Sunjammer, we are still running Mediawiki version 1.28.1, released in April
of 2017. The last release in the 1.28 sequence was 1.28.3, released in November
of 2017. Sunjammer is running PHP 7.3.6, as provided with Ubuntu 16.04, despite
the fact that Sunjammer is running Ubuntu 18.04, according to 'lsb_release -a'
Over the last few days, we've had quite a few errors:
$grep -i rror /var/log/apache2/wiki.sugarlabs.org/wiki.sugarlabs.org-error.log
| grep -i "Maximum execution time of 30 seconds exceeded" | wc -l
35
$ grep -i rror wiki.sugarlabs.org-error.log | grep -i "unable to stat" | wc -l
264
20 of these errors are on various lines of /srv/www-sugarlabs/wiki/includes/
libs/rdbms/database/Database.php
The remaining fifteen were timeouts in the related /srv/www-sugarlabs/wiki/
includes/libs/rdbms/database/DatabaseMysqli.php on line 46
Since this is an old version of MediaWiki, with known vulnerabilities, I would
like to propose we update it immediately. I am not comfortable doing so
unilaterally. If anyone is willing to help, and has any level of familiarity
with how we have deployed MediaWiki in the past, please assist.
</pre></blockquote><blockquote type="cite"><pre wrap="">_______________________________________________
Systems mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Systems@lists.sugarlabs.org">Systems@lists.sugarlabs.org</a>
<a class="moz-txt-link-freetext" href="http://lists.sugarlabs.org/listinfo/systems">http://lists.sugarlabs.org/listinfo/systems</a>
</pre></blockquote><pre wrap="">
</pre>
</div>
<div xmlns="http://www.w3.org/1999/xhtml" class="__pbConvHr"
style="margin:30px 25px 10px 25px;"><div
style="width:100%;border-top:2px solid
rgba(146,154,163,0.7);padding-top:10px;"> <div
style="display:inline-block;white-space:nowrap;vertical-align:middle;width:49%;">
<a style="color:#485664
!important;padding-right:6px;font-weight:500;text-decoration:none
!important;" href="mailto:aperez@alexperez.com" moz-do-not-send="true">Alex
Perez</a></div> <div
style="display:inline-block;white-space:nowrap;vertical-align:middle;width:48%;text-align:
right;"> <font color="#909AA4"><span style="padding-left:6px">April
29, 2020 at 5:08 PM</span></font></div> </div></div>
<div xmlns="http://www.w3.org/1999/xhtml" class="__pbConvBody"
__pbrmquotes="true"
style="color:#909AA4;margin-left:24px;margin-right:24px;">
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<div class="moz-text-html" lang="x-unicode">
on Sunjammer, we are still running Mediawiki version <span
style="display: inline; font-size: inherit; padding: 0px;"
class="__postbox-detected-content __postbox-detected-date"
__postbox-detected-content="__postbox-detected-date"><span
style="display: inline; font-size: inherit; padding: 0px;"
class="__postbox-detected-content __postbox-detected-date"
__postbox-detected-content="__postbox-detected-date"><span
style="display: inline; font-size: inherit; padding: 0px;"
class="__postbox-detected-content __postbox-detected-date"
__postbox-detected-content="__postbox-detected-date">1.28</span>.1,</span></span>
released in
<span style="display: inline; font-size: inherit; padding: 0px;"
class="__postbox-detected-content __postbox-detected-date"
__postbox-detected-content="__postbox-detected-date">April</span> of
2017. The last release in the 1.28 sequence was <span style="display:
inline; font-size: inherit; padding: 0px;"
class="__postbox-detected-content __postbox-detected-date"
__postbox-detected-content="__postbox-detected-date"><span
style="display: inline; font-size: inherit; padding: 0px;"
class="__postbox-detected-content __postbox-detected-date"
__postbox-detected-content="__postbox-detected-date">1.28</span>.3,</span>
released in <span style="display: inline; font-size: inherit; padding:
0px;" class="__postbox-detected-content __postbox-detected-date"
__postbox-detected-content="__postbox-detected-date">November</span> of
2017. Sunjammer is running PHP 7.3.6, as
provided with Ubuntu <span style="display: inline; font-size: inherit;
padding: 0px;" class="__postbox-detected-content
__postbox-detected-date"
__postbox-detected-content="__postbox-detected-date">16.04,</span>
despite the fact that Sunjammer is running
Ubuntu <span style="display: inline; font-size: inherit; padding: 0px;"
class="__postbox-detected-content __postbox-detected-date"
__postbox-detected-content="__postbox-detected-date">18.04,</span>
according to 'lsb_release -a'<br>
<br>
Over the last few days, we've had quite a few errors:<br>
<br>
<span style="font-family: monospace;">$grep -i rror
/var/log/apache2/wiki.sugarlabs.org/wiki.sugarlabs.org-error.log | grep
-i "Maximum execution time of 30 seconds exceeded" | wc -l<br>
35<br>
$ grep -i rror wiki.sugarlabs.org-error.log | grep -i "unable to stat" |
wc -l<br>
264<br>
<br>
</span>20 of these errors are on various lines of
/srv/www-sugarlabs/wiki/includes/libs/rdbms/database/Database.php<br>
The remaining fifteen were timeouts in the related
/srv/www-sugarlabs/wiki/includes/libs/rdbms/database/DatabaseMysqli.php
on line 46<br>
<br>
Since this is an old version of MediaWiki, with known vulnerabilities, I
would like to propose we update it immediately. I am not comfortable
doing so unilaterally. If anyone is willing to help, and has any level
of familiarity with how we have deployed MediaWiki in the past, please
assist.<br>
</div>
<br><fieldset class="mimeAttachmentHeader"></fieldset><br><div>_______________________________________________<br>Systems
mailing list<br><a class="moz-txt-link-abbreviated" href="mailto:Systems@lists.sugarlabs.org">Systems@lists.sugarlabs.org</a><br><a class="moz-txt-link-freetext" href="http://lists.sugarlabs.org/listinfo/systems">http://lists.sugarlabs.org/listinfo/systems</a><br></div>
</div>
</blockquote>
<br>
</body></html>