Bugzilla Bug 124282

Upgrading from v. 2.18.4 to 2.18.5 in x86 results in an "500 Internal Server
error".  I use enotice, and there have not been any emerge messages, warning me
of extra action, which I need to take.

Fix: Some files had changed ownership to root:root, I first changed ownership,
although I have no idea if that is really necessary:

chown -R apache:apache /var/www/localhost/htdocs/bugzilla

Then I looked in /var/log/apache2/error_log, which had the error: 

(13)Permission denied: exec of '/var/www/localhost/htdocs/bugzilla/index.cgi'
failed, [...]

so I added excecution rights to all the cgi scripts:

chmod u+x /var/www/localhost/htdocs/bugzilla/*.cgi

Which resolved the internal error.

I hope this will help others upgrading bugzilla.

Best, Jon

*** Bug 130371 has been marked as a duplicate of this bug. ***

The problem here is that the bugzilla ebuild marks all the cgi-files as
"server-owned".

Now /etc/vhosts/webapp-config sets the permissions on such files to

vhost_perms_serverowned_file="0644"

This can be changed to 

vhost_perms_serverowned_file="o-w"

and webapp-config should then refrain from killing the permission bit.

The problem is: Server-owned files are usually not intended to be executable
for security reasons. I don't know exactly why the bugzilla ebuild does this
but there might be a valid reason for that. I'll contact rl03 and try to
resolve that.

So just as a workaround you can set:

vhost_perms_serverowned_file="o-w"

in /etc/vhosts/webapp-config for now.

should be fixed in 2.22.1