Custom query (1087 matches)

there has been a recent security patch for geoserver

juanluisrpJuanLu: 
I think it was CVE-2023-25157 OGC Filter SQL Injection Vulnerabilities. 
The vulnerability applies to any database backend; 
also any other software using GeoTools (depending on how they use it) can be vulnerable.

I think the fixes were backported to some previous versions 
able to run on Java 8;  2.22.2 has the patch

​https://geoserver.org/vulnerability/2023/02/20/ogc-filter-injection.html

​https://github.com/geoserver/geoserver/releases/tag/2.22.2

As per the ​https://trac.osgeo.org/osgeolive/wiki/Press%20Release%2098

The following languages are to be downloded from transifex and captured by weblate:

• sv
• pt
• nl
• tr
• zh

[Sat Mar 18 16:26:52.235568 2023] [mpm_prefork:notice] [pid 1210] AH00163: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 mod-mapcache/1.12.1 mod_wsgi/4.9.0 Python/3.10 configured -- resuming normal operations
[Sat Mar 18 16:26:52.235603 2023] [core:notice] [pid 1210] AH00094: Command line: '/usr/sbin/apache2'
[Sat Mar 18 16:26:54.643746 2023] [mpm_prefork:notice] [pid 1210] AH00170: caught SIGWINCH, shutting down gracefully
[Sat Mar 18 16:26:56.531448 2023] [mpm_prefork:notice] [pid 1598] AH00163: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 mod-mapcache/1.12.1 mod_wsgi/4.9.0 Python/3.10 configured -- resuming normal operations
[Sat Mar 18 16:26:56.531473 2023] [core:notice] [pid 1598] AH00094: Command line: '/usr/sbin/apache2'
[Sat Mar 18 16:34:27.655362 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490] mod_wsgi (pid=1617): Failed to exec Python script file '/usr/lib/python3/dist-packages/geonode/wsgi.py'.
[Sat Mar 18 16:34:27.655408 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490] mod_wsgi (pid=1617): Exception occurred processing WSGI script '/usr/lib/python3/dist-packages/geonode/wsgi.py'.
[Sat Mar 18 16:34:27.674451 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490] Traceback (most recent call last):
[Sat Mar 18 16:34:27.674517 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "/usr/lib/python3/dist-packages/geonode/wsgi.py", line 29, in <module>
[Sat Mar 18 16:34:27.674522 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]     application = get_wsgi_application()
[Sat Mar 18 16:34:27.674527 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "/usr/lib/python3/dist-packages/django/core/wsgi.py", line 12, in get_wsgi_application
[Sat Mar 18 16:34:27.674531 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]     django.setup(set_prefix=False)
[Sat Mar 18 16:34:27.674536 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "/usr/lib/python3/dist-packages/django/__init__.py", line 24, in setup
[Sat Mar 18 16:34:27.674540 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]     apps.populate(settings.INSTALLED_APPS)
[Sat Mar 18 16:34:27.674545 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "/usr/lib/python3/dist-packages/django/apps/registry.py", line 114, in populate
[Sat Mar 18 16:34:27.674548 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]     app_config.import_models()
[Sat Mar 18 16:34:27.674553 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "/usr/lib/python3/dist-packages/django/apps/config.py", line 301, in import_models
[Sat Mar 18 16:34:27.674556 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]     self.models_module = import_module(models_module_name)
[Sat Mar 18 16:34:27.674561 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "/usr/lib/python3.10/importlib/__init__.py", line 126, in import_module
[Sat Mar 18 16:34:27.674565 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]     return _bootstrap._gcd_import(name[level:], package, level)
[Sat Mar 18 16:34:27.674570 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "<frozen importlib._bootstrap>", line 1050, in _gcd_import
[Sat Mar 18 16:34:27.674575 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "<frozen importlib._bootstrap>", line 1027, in _find_and_load
[Sat Mar 18 16:34:27.674580 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "<frozen importlib._bootstrap>", line 1006, in _find_and_load_unlocked
[Sat Mar 18 16:34:27.674586 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "<frozen importlib._bootstrap>", line 688, in _load_unlocked
[Sat Mar 18 16:34:27.674591 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "<frozen importlib._bootstrap_external>", line 883, in exec_module
[Sat Mar 18 16:34:27.674596 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "<frozen importlib._bootstrap>", line 241, in _call_with_frames_removed
[Sat Mar 18 16:34:27.674601 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "/usr/lib/python3/dist-packages/geonode/monitoring/models.py", line 47, in <module>
[Sat Mar 18 16:34:27.674608 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]     import user_agents
[Sat Mar 18 16:34:27.674621 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "/usr/lib/python3/dist-packages/user_agents/__init__.py", line 3, in <module>
[Sat Mar 18 16:34:27.674625 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]     from .parsers import parse
[Sat Mar 18 16:34:27.674630 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "/usr/lib/python3/dist-packages/user_agents/parsers.py", line 3, in <module>
[Sat Mar 18 16:34:27.674633 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]     from ua_parser import user_agent_parser
[Sat Mar 18 16:34:27.674638 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "/usr/lib/python3/dist-packages/ua_parser/user_agent_parser.py", line 481, in <module>
[Sat Mar 18 16:34:27.674642 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]     regexes = yaml.load(fp, Loader=SafeLoader)
[Sat Mar 18 16:34:27.674647 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "/usr/lib/python3/dist-packages/yaml/__init__.py", line 114, in load
[Sat Mar 18 16:34:27.674650 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]     return loader.get_single_data()
[Sat Mar 18 16:34:27.674655 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "/usr/lib/python3/dist-packages/yaml/constructor.py", line 49, in get_single_data
[Sat Mar 18 16:34:27.674659 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]     node = self.get_single_node()
[Sat Mar 18 16:34:27.674664 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "yaml/_yaml.pyx", line 707, in yaml._yaml.CParser.get_single_node
[Sat Mar 18 16:34:27.674669 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "yaml/_yaml.pyx", line 725, in yaml._yaml.CParser._compose_document
[Sat Mar 18 16:34:27.674674 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "yaml/_yaml.pyx", line 776, in yaml._yaml.CParser._compose_node
[Sat Mar 18 16:34:27.675603 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "yaml/_yaml.pyx", line 890, in yaml._yaml.CParser._compose_mapping_node
[Sat Mar 18 16:34:27.675632 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "yaml/_yaml.pyx", line 774, in yaml._yaml.CParser._compose_node
[Sat Mar 18 16:34:27.675648 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "yaml/_yaml.pyx", line 851, in yaml._yaml.CParser._compose_sequence_node
[Sat Mar 18 16:34:27.675654 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "yaml/_yaml.pyx", line 776, in yaml._yaml.CParser._compose_node
[Sat Mar 18 16:34:27.675865 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "yaml/_yaml.pyx", line 890, in yaml._yaml.CParser._compose_mapping_node
[Sat Mar 18 16:34:27.675871 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "yaml/_yaml.pyx", line 732, in yaml._yaml.CParser._compose_node
[Sat Mar 18 16:34:27.675877 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "yaml/_yaml.pyx", line 903, in yaml._yaml.CParser._parse_next_event
[Sat Mar 18 16:34:27.675892 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "yaml/_yaml.pyx", line 912, in yaml._yaml.input_handler
[Sat Mar 18 16:34:27.675898 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]   File "/usr/lib/python3.10/encodings/ascii.py", line 26, in decode
[Sat Mar 18 16:34:27.675910 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490]     return codecs.ascii_decode(input, self.errors)[0]
[Sat Mar 18 16:34:27.676173 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36490] UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 455: ordinal not in range(128)
[Sat Mar 18 16:34:27.798556 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36492] mod_wsgi (pid=1617): Failed to exec Python script file '/usr/lib/python3/dist-packages/geonode/wsgi.py'.
[Sat Mar 18 16:34:27.798607 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36492] mod_wsgi (pid=1617): Exception occurred processing WSGI script '/usr/lib/python3/dist-packages/geonode/wsgi.py'.
[Sat Mar 18 16:34:27.798763 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36492] Traceback (most recent call last):
[Sat Mar 18 16:34:27.798790 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36492]   File "/usr/lib/python3/dist-packages/geonode/wsgi.py", line 29, in <module>
[Sat Mar 18 16:34:27.798795 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36492]     application = get_wsgi_application()
[Sat Mar 18 16:34:27.798801 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36492]   File "/usr/lib/python3/dist-packages/django/core/wsgi.py", line 12, in get_wsgi_application
[Sat Mar 18 16:34:27.798804 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36492]     django.setup(set_prefix=False)
[Sat Mar 18 16:34:27.798809 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36492]   File "/usr/lib/python3/dist-packages/django/__init__.py", line 24, in setup
[Sat Mar 18 16:34:27.798813 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36492]     apps.populate(settings.INSTALLED_APPS)
[Sat Mar 18 16:34:27.798818 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36492]   File "/usr/lib/python3/dist-packages/django/apps/registry.py", line 83, in populate
[Sat Mar 18 16:34:27.798821 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36492]     raise RuntimeError("populate() isn't reentrant")
[Sat Mar 18 16:34:27.798834 2023] [wsgi:error] [pid 1617] [remote 127.0.0.1:36492] RuntimeError: populate() isn't reentrant