Bug 124282 - Update from bugzilla 2.18.4 to 2.18.5 causes internal server error. Have fix!
Bug#: 124282 Product:  Gentoo Linux Version: unspecified Platform: All
OS/Version: Linux Status: RESOLVED Severity: normal Priority: P2
Resolution: FIXED Assigned To: web-apps@gentoo.org Reported By: sporring@diku.dk
Component: Ebuilds
URL: 
Summary: Update from bugzilla 2.18.4 to 2.18.5 causes internal server error. Have fix!
Keywords:  
Status Whiteboard: 
Opened: 2006-02-27 09:43 0000
Description:   Opened: 2006-02-27 09:43 0000
Upgrading from v. 2.18.4 to 2.18.5 in x86 results in an "500 Internal Server
error".  I use enotice, and there have not been any emerge messages, warning me
of extra action, which I need to take.

Fix: Some files had changed ownership to root:root, I first changed ownership,
although I have no idea if that is really necessary:

chown -R apache:apache /var/www/localhost/htdocs/bugzilla

Then I looked in /var/log/apache2/error_log, which had the error: 

(13)Permission denied: exec of '/var/www/localhost/htdocs/bugzilla/index.cgi'
failed, [...]

so I added excecution rights to all the cgi scripts:

chmod u+x /var/www/localhost/htdocs/bugzilla/*.cgi

Which resolved the internal error.

I hope this will help others upgrading bugzilla.

Best, Jon

------- Comment #1 From Gunnar Wrobel 2006-12-05 08:41:11 0000 -------
*** Bug 130371 has been marked as a duplicate of this bug. ***

------- Comment #2 From Gunnar Wrobel 2006-12-05 08:48:36 0000 -------
The problem here is that the bugzilla ebuild marks all the cgi-files as
"server-owned".

Now /etc/vhosts/webapp-config sets the permissions on such files to

vhost_perms_serverowned_file="0644"

This can be changed to 

vhost_perms_serverowned_file="o-w"

and webapp-config should then refrain from killing the permission bit.

The problem is: Server-owned files are usually not intended to be executable
for security reasons. I don't know exactly why the bugzilla ebuild does this
but there might be a valid reason for that. I'll contact rl03 and try to
resolve that.

So just as a workaround you can set:

vhost_perms_serverowned_file="o-w"

in /etc/vhosts/webapp-config for now.

------- Comment #3 From Renat Lumpau 2007-01-03 07:46:26 0000 -------
should be fixed in 2.22.1