Re: FW: 192.53.95.20/now .21 and .22
Dave Miller <[email protected]> Wed, 11 Dec 2024 01:21:03 -0500
| Newsgroups | gmane.comp.mozilla.devel.webtools |
|---|---|
| Message-ID | <[email protected]> |
--===============4933145702615927503==
Content-Type: multipart/alternative;
boundary=----A6JCYTMXYSNRHJDB9EKYJK2D025SCS
Content-Transfer-Encoding: 7bit
------A6JCYTMXYSNRHJDB9EKYJK2D025SCS
Content-Type: text/plain;
charset=utf-8
Content-Transfer-Encoding: quoted-printable
Yes, Bugzilla 5=2E2 did end up including the MySQL 8 support after all=2E A=
t the point I wrote that email thread to you we thought it wasn't going to =
land in time, but in the end it did=2E
On December 10, 2024 11:03:09 AM EST, "Hunt, Ron (PERATON)" <Ronald=2EHunt=
@peraton=2Ecom> wrote:
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message =
and/or its attachment contains confidential and/or proprietary information =
of Peraton Corp=2E (Peraton) that may only be received, disclosed, or used =
as authorized by Peraton=2E The information in this message may be exempt f=
rom release under the Freedom of Information Act=2E If you received this me=
ssage in error, please delete all copies, and promptly notify the sender=2E
>
>Hello,
>I would like to confirm this fix is working in the current stable 5=2E2 B=
ugzilla version?
>Thank you,
>Ron
>
>From: Barrier, Brie (PERATON) <brie=2Ea=2Ebarrier@peraton=2Ecom>
>Sent: Tuesday, December 10, 2024 10:58 AM
>To: Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom>; Critzer, Judith (P=
ERATON) <judy=2Ecritzer@peraton=2Ecom>; Benveniste, Teri (PERATON) <Teri=2E=
Benveniste@peraton=2Ecom>
>Cc: Cyber Vulnerability Management <cybervulnmgmt@peraton=2Ecom>; Switzer=
, Mark L (PERATON) <Mark=2EL=2ESwitzer@peraton=2Ecom>
>Subject: RE: 192=2E53=2E95=2E20/now =2E21 and =2E22
>
>
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message =
and/or its attachment contains confidential and/or proprietary information =
of Peraton Corp=2E (Peraton) that may only be received, disclosed, or used =
as authorized by Peraton=2E The information in this message may be exempt f=
rom release under the Freedom of Information Act=2E If you received this me=
ssage in error, please delete all copies, and promptly notify the sender=2E
>
>Thanks they show this though as a closed/resolved bug available in versio=
n 5=2E2 deployed to stable 9 months ago=2E
>1592129 - Bugzilla failed after mysql upgrade to 8=2E0=2E17 due to "group=
s" keyword in mysql<https://bugzilla=2Emozilla=2Eorg/show_bug=2Ecgi?id=3D15=
92129>
>And that this is in the patch notes for the 5=2E2 release as a highlight =
of fixed=2E
>5=2E2 - Bugzilla<https://www=2Ebugzilla=2Eorg/releases/5=2E2/>
>[cid:image004=2Epng@01DB4AF2=2E9C251AA0]
>The email chain you have is from Jan 2024 unfortunately and is not valid =
as a documentation showing this is a blocking issue with the contrary docum=
entation=2E
>
>
>
>Thanks,
>Brie Barrier
>Pronouns: She/Her/Hers
>Manager, Vulnerability Management Team
>
>Office: (571)508-4192
>[cid:image001=2Epng@01DB4AF2=2E6954FC80]
>[cid:image002=2Epng@01DB4AF2=2E6954FC80]This is a Safe Space=2E
>
>From: Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHu=
nt@peraton=2Ecom>>
>Sent: Tuesday, December 10, 2024 10:51 AM
>To: Barrier, Brie (PERATON) <brie=2Ea=2Ebarrier@peraton=2Ecom<mailto:brie=
=2Ea=2Ebarrier@peraton=2Ecom>>; Critzer, Judith (PERATON) <judy=2Ecritzer@p=
eraton=2Ecom<mailto:judy=2Ecritzer@peraton=2Ecom>>; Benveniste, Teri (PERAT=
ON) <Teri=2EBenveniste@peraton=2Ecom<mailto:Teri=2EBenveniste@peraton=2Ecom=
>>; Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHunt@p=
eraton=2Ecom>>
>Cc: Cyber Vulnerability Management <cybervulnmgmt@peraton=2Ecom<mailto:cy=
bervulnmgmt@peraton=2Ecom>>
>Subject: RE: 192=2E53=2E95=2E20/now =2E21 and =2E22
>
>
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message =
and/or its attachment contains confidential and/or proprietary information =
of Peraton Corp=2E (Peraton) that may only be received, disclosed, or used =
as authorized by Peraton=2E The information in this message may be exempt f=
rom release under the Freedom of Information Act=2E If you received this me=
ssage in error, please delete all copies, and promptly notify the sender=2E
>
>Currently Bugizlla is at Stable release 5=2E2 and not 5=2E2+=2E 5=2E2 doe=
sn't work with MySql 8=2E0 and thus doesn't work with RHEL 8=2E So hopefull=
y the NEXT Bugzilla release will include the fixes that allows Bugzilla to =
work correctly with MySql 8=2E
>
>Per the Bugzilla support email:
>Here is the email string between Bugziila support and myself:
>
>Bugzilla doesn't currently work with MySQL 8=2E
>
>We're hoping to have MySQL 8 supported again in version 5=2E2=2E1 or so (=
5=2E2 which is about to be released will probably have MySQL 8 blocklisted =
because the compatibility fixes aren't quite ready to land yet, it's an ext=
remely invasive patch)
>
>On January 2, 2024 7:37:08 AM EST, "Hunt, Ron (PERATON)" <Ronald=2EHunt@p=
eraton=2Ecom<mailto:Ronald=2EHunt@peraton=2Ecom>> wrote:
>Good morning,
>
>I am currently in the process of upgrading my current RHEL 7 - MySql57 - =
Bugzilla 5=2E0=2E6 to RHEL 8 - MySql8=2E0 - Bugzilla 5=2E0=2E6 due to RHEL =
7 moving to end of life status=2E
>
>Once I have everything installed and ran the =2Echecksetup=2Epl script, I=
am getting the following error due to MySql8=2E0 using "group" preventing =
Bugzilla to use it as a primary key:
>
>DBD::mysql::db selectrow_array failed: You have an error in your SQL synt=
ax; check the manual that corresponds to your MySQL server version for the =
right syntax to use near 'groups where name =3D ''' at line 1 [for Statemen=
t "SELECT id FROM groups where name =3D ''"] at Bugzilla/Install/DB=2Epm li=
ne 2497=2E
> Bugzilla::Install::DB::_fix_group_with_empty_name() called at Bug=
zilla/Install/DB=2Epm line 358
> Bugzilla::Install::DB::update_table_definitions(HASH(0x55dd82199c=
c8)) called at =2E/checksetup=2Epl line 175
>
>Any suggestions on how to resolve this issue?
>
>So as soon as the next release is available I should then be able to upgr=
ade Apache, RHEL, MySql and Bugzilla without conflict=2E
>
>Please let me know if you need additional information regarding this issu=
e=2E
>
>Thanks,
>Ron
>
>From: Barrier, Brie (PERATON) <brie=2Ea=2Ebarrier@peraton=2Ecom<mailto:br=
ie=2Ea=2Ebarrier@peraton=2Ecom>>
>Sent: Tuesday, December 10, 2024 10:45 AM
>To: Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHunt=
@peraton=2Ecom>>; Critzer, Judith (PERATON) <judy=2Ecritzer@peraton=2Ecom<m=
ailto:judy=2Ecritzer@peraton=2Ecom>>; Benveniste, Teri (PERATON) <Teri=2EBe=
nveniste@peraton=2Ecom<mailto:Teri=2EBenveniste@peraton=2Ecom>>
>Cc: Cyber Vulnerability Management <cybervulnmgmt@peraton=2Ecom<mailto:cy=
bervulnmgmt@peraton=2Ecom>>
>Subject: RE: 192=2E53=2E95=2E20/now =2E21 and =2E22
>
>
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message =
and/or its attachment contains confidential and/or proprietary information =
of Peraton Corp=2E (Peraton) that may only be received, disclosed, or used =
as authorized by Peraton=2E The information in this message may be exempt f=
rom release under the Freedom of Information Act=2E If you received this me=
ssage in error, please delete all copies, and promptly notify the sender=2E
>
>Thanks, for clarification documentation states versions 2=2E2=2Ex and 2=
=2E4=2Ex are fully supported 3=2E5=2E2=2E Apache on Windows - Bugzilla 5=2E=
2+ documentation<https://bugzilla=2Ereadthedocs=2Eio/en/latest/installing/a=
pache-windows=2Ehtml>
>
>With that documentation what is the issue preventing deployment of versio=
n 2=2E4=2E62? Ill need links to the documentation if there is a bug I misse=
d preventing that deployment and I can then file the risk exception with th=
at documentation=2E
>
>Previously the hold up was due to MYSQL 8 not being supported (march 6th=
email)but with version 5=2E0=2E6/previous stable but with 5=2E2 it now is =
supported5=2E2 - Bugzilla<https://www=2Ebugzilla=2Eorg/releases/5=2E2/>
>
>
>Thanks,
>Brie Barrier
>Pronouns: She/Her/Hers
>Manager, Vulnerability Management Team
>
>Office: (571)508-4192
>[cid:image001=2Epng@01DB4AF2=2E6954FC80]
>[cid:image002=2Epng@01DB4AF2=2E6954FC80]This is a Safe Space=2E
>
>From: Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHu=
nt@peraton=2Ecom>>
>Sent: Tuesday, December 10, 2024 9:49 AM
>To: Barrier, Brie (PERATON) <brie=2Ea=2Ebarrier@peraton=2Ecom<mailto:brie=
=2Ea=2Ebarrier@peraton=2Ecom>>; Critzer, Judith (PERATON) <judy=2Ecritzer@p=
eraton=2Ecom<mailto:judy=2Ecritzer@peraton=2Ecom>>; Hunt, Ron (PERATON) <Ro=
nald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHunt@peraton=2Ecom>>; Benveniste,=
Teri (PERATON) <Teri=2EBenveniste@peraton=2Ecom<mailto:Teri=2EBenveniste@p=
eraton=2Ecom>>
>Cc: Cyber Vulnerability Management <cybervulnmgmt@peraton=2Ecom<mailto:cy=
bervulnmgmt@peraton=2Ecom>>
>Subject: RE: 192=2E53=2E95=2E20/now =2E21 and =2E22
>
>
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message =
and/or its attachment contains confidential and/or proprietary information =
of Peraton Corp=2E (Peraton) that may only be received, disclosed, or used =
as authorized by Peraton=2E The information in this message may be exempt f=
rom release under the Freedom of Information Act=2E If you received this me=
ssage in error, please delete all copies, and promptly notify the sender=2E
>
>Brie,
>
>We are still waiting for the Bugzilla release that will work with the upd=
ated Apache and RHEL versions=2E We are currently up to 5=2E2 and waiting f=
or either 5=2E2=2E1 or higher to become the "Stable" version for public use=
=2E
>
>[cid:image003=2Epng@01DB4AF2=2E6954FC80]
>
>What actions do I need to take to refile this for a risk exception?
>
>Thank you,
>Ron
>
>From: Barrier, Brie (PERATON) <brie=2Ea=2Ebarrier@peraton=2Ecom<mailto:br=
ie=2Ea=2Ebarrier@peraton=2Ecom>>
>Sent: Tuesday, December 10, 2024 9:17 AM
>To: Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHunt=
@peraton=2Ecom>>; Critzer, Judith (PERATON) <judy=2Ecritzer@peraton=2Ecom<m=
ailto:judy=2Ecritzer@peraton=2Ecom>>
>Cc: Cyber Vulnerability Management <cybervulnmgmt@peraton=2Ecom<mailto:cy=
bervulnmgmt@peraton=2Ecom>>
>Subject: RE: 192=2E53=2E95=2E20/now =2E21 and =2E22
>
>
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message =
and/or its attachment contains confidential and/or proprietary information =
of Peraton Corp=2E (Peraton) that may only be received, disclosed, or used =
as authorized by Peraton=2E The information in this message may be exempt f=
rom release under the Freedom of Information Act=2E If you received this me=
ssage in error, please delete all copies, and promptly notify the sender=2E
>
>No problem thanks for taking a look and let us know either way/if it cant=
be mitigated we will likely want to file this again for a risk exception=
=2E
>
>Thanks,
>Brie Barrier
>Pronouns: She/Her/Hers
>Manager, Vulnerability Management Team
>
>Office: (571)508-4192
>[cid:image001=2Epng@01DB4AF2=2E6954FC80]
>[cid:image002=2Epng@01DB4AF2=2E6954FC80]This is a Safe Space=2E
>
>From: Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHu=
nt@peraton=2Ecom>>
>Sent: Tuesday, December 10, 2024 9:12 AM
>To: Barrier, Brie (PERATON) <brie=2Ea=2Ebarrier@peraton=2Ecom<mailto:brie=
=2Ea=2Ebarrier@peraton=2Ecom>>; Critzer, Judith (PERATON) <judy=2Ecritzer@p=
eraton=2Ecom<mailto:judy=2Ecritzer@peraton=2Ecom>>; Hunt, Ron (PERATON) <Ro=
nald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHunt@peraton=2Ecom>>
>Cc: Cyber Vulnerability Management <cybervulnmgmt@peraton=2Ecom<mailto:cy=
bervulnmgmt@peraton=2Ecom>>
>Subject: RE: 192=2E53=2E95=2E20/now =2E21 and =2E22
>
>
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message =
and/or its attachment contains confidential and/or proprietary information =
of Peraton Corp=2E (Peraton) that may only be received, disclosed, or used =
as authorized by Peraton=2E The information in this message may be exempt f=
rom release under the Freedom of Information Act=2E If you received this me=
ssage in error, please delete all copies, and promptly notify the sender=2E
>
>Good morning Brie and thank you for your patience in this matter=2E I wil=
l check and see if we can now move up to the latest Apache version along wi=
th RHEL without conflict with Bugzilla=2E
>
>More to follow=2E
>
>Thanks,
>Ron
>
>From: Barrier, Brie (PERATON) <brie=2Ea=2Ebarrier@peraton=2Ecom<mailto:br=
ie=2Ea=2Ebarrier@peraton=2Ecom>>
>Sent: Tuesday, December 10, 2024 8:38 AM
>To: Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHunt=
@peraton=2Ecom>>; Critzer, Judith (PERATON) <judy=2Ecritzer@peraton=2Ecom<m=
ailto:judy=2Ecritzer@peraton=2Ecom>>
>Cc: Cyber Vulnerability Management <cybervulnmgmt@peraton=2Ecom<mailto:cy=
bervulnmgmt@peraton=2Ecom>>
>Subject: RE: 192=2E53=2E95=2E20/now =2E21 and =2E22
>
>
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message =
and/or its attachment contains confidential and/or proprietary information =
of Peraton Corp=2E (Peraton) that may only be received, disclosed, or used =
as authorized by Peraton=2E The information in this message may be exempt f=
rom release under the Freedom of Information Act=2E If you received this me=
ssage in error, please delete all copies, and promptly notify the sender=2E
>
>Good morning! Reaching out to check the status of updates on the GEX syst=
ems we observe in xpanse=2E
>192=2E53=2E95=2E22:443 and 192=2E53=2E95=2E21:443 are flagging for outdat=
ed Apache webservers and are exposed publicly=2E Is it possible to update =
them to the latest versions? Full details attached=2E
>
>192=2E53=2E95=2E21:Version detected 2=2E4=2E37
>This issue flags Apache HTTP Servers that are known to be below the curre=
nt up-to-date secured versions suggested by Apache=2E Specifically, this is=
sue flags versions prior to 2=2E4=2E62=2E Versions of Apache HTTP Server fl=
agged by this policy are likely vulnerable to multiple known exploits, incl=
uding CVE-2021-41773, CVE-2021-34798, CVE-2022-23943, CVE-2023-25690, CVE-2=
024-27316, and CVE-2024-40725=2E Version 2=2E4=2E62 addresses vulnerabiliti=
es that were present in 2=2E4=2E61 and below=2E Note: This issue policy ext=
racts Apache's self reported version in the 'Server' header=2E Certain Linu=
x/Unix vendors like Red Hat, CentOS, Debian, Ubuntu backport versions of op=
en source packages like Apache, OpenSSH, PHP and BIND=2E The term backporti=
ng describes the action of taking a fix for a security flaw out of the most=
recent version of an upstream software package and applying that fix to an=
older version of the package distributed by these Linux/Unix vendors=2E If=
the 'Server' header reports the underlying OS, this policy implies a poten=
tially insecure version which may be backported=2E
>
>192=2E53=2E95=2E22: Version detected 2=2E4=2E6
>Apache HTTP Server, commonly called Apache, is an open-source cross-platf=
orm web server for Unix and Windows that is among the most widely used web =
servers=2E Apache is developed and maintained by the Apache Software Founda=
tion=2E This issue flags Apache HTTP Servers that are known to be below the=
current up-to-date secured versions suggested by Apache=2E Specifically, t=
his issue flags versions prior to 2=2E4=2E62=2E Versions of Apache HTTP Ser=
ver flagged by this policy are likely vulnerable to multiple known exploits=
, including CVE-2021-41773, CVE-2021-34798, CVE-2022-23943, CVE-2023-25690,=
CVE-2024-27316, and CVE-2024-40725=2E Version 2=2E4=2E62 addresses vulnera=
bilities that were present in 2=2E4=2E61 and below=2E Note: This issue poli=
cy extracts Apache's self reported version in the 'Server' header=2E Certai=
n Linux/Unix vendors like Red Hat, CentOS, Debian, Ubuntu backport versions=
of open source packages like Apache, OpenSSH, PHP and BIND=2E The term bac=
kporting describes the action of taking a fix for a security flaw out of th=
e most recent version of an upstream software package and applying that fix=
to an older version of the package distributed by these Linux/Unix vendors=
=2E If the 'Server' header reports the underlying OS, this policy implies a=
potentially insecure version which may be backported=2E
>
>
>
>
>
>
>Thanks,
>Brie Barrier
>Pronouns: She/Her/Hers
>Manager, Vulnerability Management Team
>
>Office: (571)508-4192
>[cid:image001=2Epng@01DB4AF2=2E6954FC80]
>[cid:image002=2Epng@01DB4AF2=2E6954FC80]This is a Safe Space=2E
>
>From: Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHu=
nt@peraton=2Ecom>>
>Sent: Wednesday, March 6, 2024 3:25 PM
>To: Barrier, Brie (PERATON) <brie=2Ea=2Ebarrier@peraton=2Ecom<mailto:brie=
=2Ea=2Ebarrier@peraton=2Ecom>>; Critzer, Judith (PERATON) <judy=2Ecritzer@p=
eraton=2Ecom<mailto:judy=2Ecritzer@peraton=2Ecom>>
>Cc: Cyber Vulnerability Management <cybervulnmgmt@peraton=2Ecom<mailto:cy=
bervulnmgmt@peraton=2Ecom>>; Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ec=
om<mailto:Ronald=2EHunt@peraton=2Ecom>>
>Subject: RE: 192=2E53=2E95=2E20
>
>
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message =
and/or its attachment contains confidential and/or proprietary information =
of Peraton Corp=2E (Peraton) that may only be received, disclosed, or used =
as authorized by Peraton=2E The information in this message may be exempt f=
rom release under the Freedom of Information Act=2E If you received this me=
ssage in error, please delete all copies, and promptly notify the sender=2E
>
>Brie,
>
>Currently there is no information on the projected release date for 5=2E1=
=2E2=2E Here is the information from the Bugzilla website on their releases=
:
>
>Release Information
>Current Releases and Change Policy
>
> * Current Stable Release (5=2E0=2E6<https://www=2Ebugzilla=2Eorg/rele=
ases/5=2E0=2E6/>)
>
> * Includes bug fixes and performance improvements only
> * No new features or large scale performance improvements
> * No database schema changes
> * May contain documentation changes
> * No changes to templates that aren't part of bug fix, other than =
typos or grammatical fixes
>
> * Trunk (5=2E1=2E2<https://www=2Ebugzilla=2Eorg/releases/6=2E0/>)
>
> * Approved changes added constantly
> * Occasional development snapshots are released
>
> * Old Stable Release (4=2E4=2E13<https://www=2Ebugzilla=2Eorg/release=
s/4=2E4=2E13/>)
>
> * Current policy is that 4 months after the next major release, su=
pport for the oldest stable release will be dropped=2E The other stable rel=
ease will still be supported until four months after the next major release=
=2E
> * Contains security, crash, data loss, and selected critical fixes=
only
> * No documentation changes unrelated to the above changes allowed
>
>Any release prior to the old stable release is unsupported=2E
>
>Release Dates
>
>Here is a list of the release dates of every version of Bugzilla sorted b=
y its branch=2E You can click on the version number for a list of release n=
otes, download links, and security advisories relevant to that release=2E
>
> * 5=2E0
>
> * 5=2E0=2E6<https://www=2Ebugzilla=2Eorg/releases/5=2E0=2E6/> Feb =
09, 2019
>
>Please let me know if there is anything else I can provide on this issue=
=2E
>
>Thanks,
>Ron
>
>From: Barrier, Brie (PERATON) <brie=2Ea=2Ebarrier@peraton=2Ecom<mailto:br=
ie=2Ea=2Ebarrier@peraton=2Ecom>>
>Sent: Wednesday, March 6, 2024 3:21 PM
>To: Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHunt=
@peraton=2Ecom>>; Critzer, Judith (PERATON) <judy=2Ecritzer@peraton=2Ecom<m=
ailto:judy=2Ecritzer@peraton=2Ecom>>
>Cc: Cyber Vulnerability Management <cybervulnmgmt@peraton=2Ecom<mailto:cy=
bervulnmgmt@peraton=2Ecom>>
>Subject: RE: 192=2E53=2E95=2E20
>
>
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message =
and/or its attachment contains confidential and/or proprietary information =
of Peraton Corp=2E (Peraton) that may only be received, disclosed, or used =
as authorized by Peraton=2E The information in this message may be exempt f=
rom release under the Freedom of Information Act=2E If you received this me=
ssage in error, please delete all copies, and promptly notify the sender=2E
>
>Thanks for those details, yes it can be a bit of an issue=2E Because of t=
hat blocker and documentation do they have an estimate on the release date =
of the 5=2E2=2E1 version that may support the updated mysql? That way then =
I can put in a risk exception for tracking while we await a official vendor=
fix=2E
>
>Thanks,
>Brie Barrier
>Pronouns: She/Her/Hers
>Lead, Vulnerability Management Team
>
>Office: (571)508-4192
>[cid:image001=2Epng@01DB4AF2=2E6954FC80]
>[cid:image002=2Epng@01DB4AF2=2E6954FC80]This is a Safe Space=2E
>
>From: Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHu=
nt@peraton=2Ecom>>
>Sent: Wednesday, March 6, 2024 3:12 PM
>To: Barrier, Brie (PERATON) <brie=2Ea=2Ebarrier@peraton=2Ecom<mailto:brie=
=2Ea=2Ebarrier@peraton=2Ecom>>; Critzer, Judith (PERATON) <judy=2Ecritzer@p=
eraton=2Ecom<mailto:judy=2Ecritzer@peraton=2Ecom>>
>Cc: Cyber Vulnerability Management <cybervulnmgmt@peraton=2Ecom<mailto:cy=
bervulnmgmt@peraton=2Ecom>>; Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ec=
om<mailto:Ronald=2EHunt@peraton=2Ecom>>
>Subject: RE: 192=2E53=2E95=2E20
>
>
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message =
and/or its attachment contains confidential and/or proprietary information =
of Peraton Corp=2E (Peraton) that may only be received, disclosed, or used =
as authorized by Peraton=2E The information in this message may be exempt f=
rom release under the Freedom of Information Act=2E If you received this me=
ssage in error, please delete all copies, and promptly notify the sender=2E
>
>Hello Brie,
>
>So we are currently on RHEL 7 for our Bugzilla server which only supports=
Apache (httpd 2=2E4=2E6)=2E RHEL 8 is available, however RHEL 8 has a prob=
lem with our MySql Database which stores our Bugzilla application=2E Bugzil=
la software is working on a solution but has yet to deploy it for public us=
e=2E Long story short is that I am currently stuck between Bugzilla and Red=
Hat regarding the server version until one is working well with the other=
=2E
>
>Here is the email string between Bugziila support and myself:
>
>Bugzilla doesn't currently work with MySQL 8=2E
>
>We're hoping to have MySQL 8 supported again in version 5=2E2=2E1 or so (=
5=2E2 which is about to be released will probably have MySQL 8 blocklisted =
because the compatibility fixes aren't quite ready to land yet, it's an ext=
remely invasive patch)
>
>On January 2, 2024 7:37:08 AM EST, "Hunt, Ron (PERATON)" <Ronald=2EHunt@p=
eraton=2Ecom<mailto:Ronald=2EHunt@peraton=2Ecom>> wrote:
>Good morning,
>
>I am currently in the process of upgrading my current RHEL 7 - MySql57 - =
Bugzilla 5=2E0=2E6 to RHEL 8 - MySql8=2E0 - Bugzilla 5=2E0=2E6 due to RHEL =
7 moving to end of life status=2E
>
>Once I have everything installed and ran the =2Echecksetup=2Epl script, I=
am getting the following error due to MySql8=2E0 using "group" preventing =
Bugzilla to use it as a primary key:
>
>DBD::mysql::db selectrow_array failed: You have an error in your SQL synt=
ax; check the manual that corresponds to your MySQL server version for the =
right syntax to use near 'groups where name =3D ''' at line 1 [for Statemen=
t "SELECT id FROM groups where name =3D ''"] at Bugzilla/Install/DB=2Epm li=
ne 2497=2E
> Bugzilla::Install::DB::_fix_group_with_empty_name() called at Bug=
zilla/Install/DB=2Epm line 358
> Bugzilla::Install::DB::update_table_definitions(HASH(0x55dd82199c=
c8)) called at =2E/checksetup=2Epl line 175
>
>Any suggestions on how to resolve this issue?
>
>Thank you,
>
>Ron
>
>I am still waiting on the latest release from Bugzilla to attempt to clea=
r this issue=2E
>
>Thanks,
>Ron
>
>From: Barrier, Brie (PERATON) <brie=2Ea=2Ebarrier@peraton=2Ecom<mailto:br=
ie=2Ea=2Ebarrier@peraton=2Ecom>>
>Sent: Wednesday, March 6, 2024 1:43 PM
>To: Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHunt=
@peraton=2Ecom>>; Critzer, Judith (PERATON) <judy=2Ecritzer@peraton=2Ecom<m=
ailto:judy=2Ecritzer@peraton=2Ecom>>
>Cc: Cyber Vulnerability Management <cybervulnmgmt@peraton=2Ecom<mailto:cy=
bervulnmgmt@peraton=2Ecom>>
>Subject: RE: 192=2E53=2E95=2E20
>
>
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message =
and/or its attachment contains confidential and/or proprietary information =
of Peraton Corp=2E (Peraton) that may only be received, disclosed, or used =
as authorized by Peraton=2E The information in this message may be exempt f=
rom release under the Freedom of Information Act=2E If you received this me=
ssage in error, please delete all copies, and promptly notify the sender=2E
>
>Great thank you!
>
>Thanks,
>Brie Barrier
>Pronouns: She/Her/Hers
>Lead, Vulnerability Management Team
>
>Office: (571)508-4192
>[cid:image001=2Epng@01DB4AF2=2E6954FC80]
>[cid:image002=2Epng@01DB4AF2=2E6954FC80]This is a Safe Space=2E
>
>From: Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHu=
nt@peraton=2Ecom>>
>Sent: Wednesday, March 6, 2024 12:14 PM
>To: Barrier, Brie (PERATON) <brie=2Ea=2Ebarrier@peraton=2Ecom<mailto:brie=
=2Ea=2Ebarrier@peraton=2Ecom>>; Critzer, Judith (PERATON) <judy=2Ecritzer@p=
eraton=2Ecom<mailto:judy=2Ecritzer@peraton=2Ecom>>
>Cc: Cyber Vulnerability Management <cybervulnmgmt@peraton=2Ecom<mailto:cy=
bervulnmgmt@peraton=2Ecom>>
>Subject: RE: 192=2E53=2E95=2E20
>
>
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message =
and/or its attachment contains confidential and/or proprietary information =
of Peraton Corp=2E (Peraton) that may only be received, disclosed, or used =
as authorized by Peraton=2E The information in this message may be exempt f=
rom release under the Freedom of Information Act=2E If you received this me=
ssage in error, please delete all copies, and promptly notify the sender=2E
>
>Good morning Brie,
>
>Yes, I will take a look and see if I can get this resolved ASAP=2E
>
>Thanks,
>Ron
>
>From: Barrier, Brie (PERATON) <brie=2Ea=2Ebarrier@peraton=2Ecom<mailto:br=
ie=2Ea=2Ebarrier@peraton=2Ecom>>
>Sent: Wednesday, March 6, 2024 12:08 PM
>To: Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom<mailto:Ronald=2EHunt=
@peraton=2Ecom>>; Critzer, Judith (PERATON) <judy=2Ecritzer@peraton=2Ecom<m=
ailto:judy=2Ecritzer@peraton=2Ecom>>
>Cc: Cyber Vulnerability Management <cybervulnmgmt@peraton=2Ecom<mailto:cy=
bervulnmgmt@peraton=2Ecom>>
>Subject: 192=2E53=2E95=2E20
>
>
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message =
and/or its attachment contains confidential and/or proprietary information =
of Peraton Corp=2E (Peraton) that may only be received, disclosed, or used =
as authorized by Peraton=2E The information in this message may be exempt f=
rom release under the Freedom of Information Act=2E If you received this me=
ssage in error, please delete all copies, and promptly notify the sender=2E
>
>Good morning!
>Your Bugzilla site at 192=2E53=2E95=2E20 popped for a few security issues=
recently so I was hoping you could take a look to review=2E All the issues=
seem to tie back to the apache http server supporting bugzilla
>
>
>The critical issues
>CVE-2022-22720 : Apache HTTP Server 2=2E4=2E52 and earlier fails to close=
inbound connection when errors are encountered discarding the reque (cvede=
tails=2Ecom)<https://www=2Ecvedetails=2Ecom/cve/CVE-2022-22720>
>CVE-2021-39275 : ap_escape_quotes() may write beyond the end of a buffer =
when given malicious input=2E No included modules pass untrusted d (cvedeta=
ils=2Ecom)<https://www=2Ecvedetails=2Ecom/cve/CVE-2021-39275>
>CVE-2022-22721 : If LimitXMLRequestBody is set to allow request bodies la=
rger than 350MB (defaults to 1M) on 32 bit systems an integer ov (cvedetail=
s=2Ecom)<https://www=2Ecvedetails=2Ecom/cve/CVE-2022-22721>
>
>High issues
>CVE-2021-34798 : Malformed requests may cause the server to dereference a=
NULL pointer=2E This issue affects Apache HTTP Server 2=2E4=2E48 and (cved=
etails=2Ecom)<https://www=2Ecvedetails=2Ecom/cve/CVE-2021-34798>
>CVE-2022-22719 : A carefully crafted request body can cause a read to a r=
andom memory area which could cause the process to crash=2E This i (cvedeta=
ils=2Ecom)<https://www=2Ecvedetails=2Ecom/cve/CVE-2022-22719>
>
>The latest release for apache 2=2E4 appears to be 2=2E4=2E58 which came o=
ut in October, could it be applied to clear these issues?
>Apache HTTP Server Project<https://downloads=2Eapache=2Eorg/httpd/Announc=
ement2=2E4=2Ehtml>
>
>
>Thanks,
>Brie Barrier
>Pronouns: She/Her/Hers
>Lead, Vulnerability Management Team
>
>Office: (571)508-4192
>[cid:image001=2Epng@01DB4AF2=2E6954FC80]
>[cid:image002=2Epng@01DB4AF2=2E6954FC80]This is a Safe Space=2E
>
--=20
Sent from my Android phone with K-9 Mail=2E Please excuse my brevity=2E
------A6JCYTMXYSNRHJDB9EKYJK2D025SCS
Content-Type: text/html;
charset=utf-8
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas=2Emicrosoft=2Ecom/office/2004/12/omml" xmlns=3D"h=
ttp://www=2Ew3=2Eorg/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii=
">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
=2Eshape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
@font-face
{font-family:Kalinga;}
/* Style Definitions */
p=2EMsoNormal, li=2EMsoNormal, div=2EMsoNormal
{margin:0in;
font-size:11=2E0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}
h1
{mso-style-priority:9;
mso-style-link:"Heading 1 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:24=2E0pt;
font-family:"Calibri",sans-serif;
font-weight:bold;}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:18=2E0pt;
font-family:"Calibri",sans-serif;
font-weight:bold;}
a:link, span=2EMsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span=2EHeading1Char
{mso-style-name:"Heading 1 Char";
mso-style-priority:9;
mso-style-link:"Heading 1";
font-family:"Calibri",sans-serif;
font-weight:bold;}
span=2EHeading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Calibri",sans-serif;
font-weight:bold;}
span=2EEmailStyle23
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
=2EMsoChpDefault
{mso-style-type:export-only;
font-size:10=2E0pt;
mso-ligatures:none;}
@page WordSection1
{size:8=2E5in 11=2E0in;
margin:1=2E0in 1=2E0in 1=2E0in 1=2E0in;}
div=2EWordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:2122914736;
mso-list-template-ids:-1392721036;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:=2E5in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1=2E0in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:1=2E5in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2=2E0in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2=2E5in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3=2E0in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3=2E5in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4=2E0in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4=2E5in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Wingdings;}
@list l1
{mso-list-id:2134907672;
mso-list-template-ids:428641614;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:=2E5in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1=2E0in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:1=2E5in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2=2E0in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2=2E5in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3=2E0in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3=2E5in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4=2E0in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4=2E5in;
mso-level-number-position:left;
text-indent:-=2E25in;
mso-ansi-font-size:10=2E0pt;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72" style=3D"word-wrap=
:break-word"><div dir=3D"auto">Yes, Bugzilla 5=2E2 did end up including the=
MySQL 8 support after all=2E At the point I wrote that email thread to you=
we thought it wasn't going to land in time, but in the end it did=2E</div>=
<br><br><div class=3D"gmail_quote"><div dir=3D"auto">On December 10, 2024 1=
1:03:09 AM EST, "Hunt, Ron (PERATON)" <Ronald=2EHunt@peraton=2Ecom> w=
rote:</div><blockquote class=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0=
=2E8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<p style=3D"font-family:Calibri;font-size:10pt;color:#000000;margin:5pt;fo=
nt-style:normal;font-weight:normal;text-decoration:none;" align=3D"Left">
PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message a=
nd/or its attachment contains confidential and/or proprietary information o=
f Peraton Corp=2E (Peraton) that may only be received, disclosed, or used a=
s authorized by Peraton=2E The information
in this message may be exempt from release under the Freedom of Informati=
on Act=2E If you received this message in error, please delete all copies, =
and promptly notify the sender=2E<br>
</p>
<br>
<div>
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">Hello,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">I would like to confirm this fix is working in the current stable 5=
=2E2 Bugzilla version?<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">Thank you,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">Ron<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif"><o:p> </o:p></span></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1=2E0pt;padding:3=2E0pt=
0in 0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"mso-ligatures:none">From:</span><=
/b><span style=3D"mso-ligatures:none"> Barrier, Brie (PERATON) <brie=2Ea=
=2Ebarrier@peraton=2Ecom>
<br>
<b>Sent:</b> Tuesday, December 10, 2024 10:58 AM<br>
<b>To:</b> Hunt, Ron (PERATON) <Ronald=2EHunt@peraton=2Ecom>; Critze=
r, Judith (PERATON) <judy=2Ecritzer@peraton=2Ecom>; Benveniste, Teri =
(PERATON) <Teri=2EBenveniste@peraton=2Ecom><br>
<b>Cc:</b> Cyber Vulnerability Management <cybervulnmgmt@peraton=2Ecom&=
gt;; Switzer, Mark L (PERATON) <Mark=2EL=2ESwitzer@peraton=2Ecom><br>
<b>Subject:</b> RE: 192=2E53=2E95=2E20/now =2E21 and =2E22<o:p></o:p></spa=
n></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p style=3D"margin:5=2E0pt"><span style=3D"font-size:10=2E0pt;font-family:=
"Calibri",sans-serif;color:black">PERATON CONFIDENTIAL AND/OR PRO=
PRIETARY INFORMATION - This email message and/or its attachment contains co=
nfidential and/or proprietary information of Peraton
Corp=2E (Peraton) that may only be received, disclosed, or used as author=
ized by Peraton=2E The information in this message may be exempt from relea=
se under the Freedom of Information Act=2E If you received this message in =
error, please delete all copies, and promptly
notify the sender=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif;mso-ligatures:none"><o:p> </o:p></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">Thanks they show this though as a closed/resolved =
bug available in version 5=2E2 deployed to stable 9 months ago=2E<o:p></o:p=
></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><a href=3D"https://bugzilla=2Emozilla=2Eorg/show_b=
ug=2Ecgi?id=3D1592129">1592129 - Bugzilla failed after mysql upgrade to 8=
=2E0=2E17 due to "groups" keyword in mysql</a><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">And that this is in the patch notes for the 5=2E2 =
release as a highlight of fixed=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><a href=3D"https://www=2Ebugzilla=2Eorg/releases/5=
=2E2/">5=2E2 - Bugzilla</a><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif;mso-ligatures:none"><img border=3D"0" width=3D"1335=
" height=3D"536" style=3D"width:13=2E9083in;height:5=2E5833in" id=3D"_x0000=
_i1040" src=3D"cid:image004=2Epng@01DB4AF2=2E9C251AA0"></span><span style=
=3D"font-size:12=2E0pt;font-family:"Aptos",sans-serif"><o:p></o:p=
></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">The email chain you have is from Jan 2024 unfortun=
ately and is not valid as a documentation showing this is a blocking issue =
with the contrary documentation=2E
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">Thanks<span style=3D"color:#404040">,</span></span=
><b><span style=3D"font-size:12=2E0pt;font-family:"Aptos",sans-se=
rif;mso-ligatures:none"><o:p></o:p></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:12=2E0pt;color:black">B=
rie Barrier</span><span style=3D"color:black"><o:p></o:p></span></b></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><i><span style=3D"fon=
t-size:12=2E0pt;font-family:"Aptos",sans-serif;color:black">Prono=
uns: She/Her/Hers<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt">Manager, Vulnera=
bility Management Team<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;color:black"><o:p=
> </o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12=2E0pt"><span style=3D"fon=
t-size:12=2E0pt;color:black">Office: (571)508-4192<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Kalinga",sans-serif;color:black;mso-ligatures:none"><img border=3D"0"=
width=3D"152" height=3D"43" style=3D"width:1=2E5833in;height:=2E45in" id=
=3D"Picture_x0020_734077816" src=3D"cid:image001=2Epng@01DB4AF2=2E6954FC80"=
></span><span style=3D"font-size:12=2E0pt;font-family:"Kalinga",s=
ans-serif;color:black;mso-ligatures:none"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif;mso-ligatures:none"><img border=3D"0" width=3D"23" =
height=3D"15" style=3D"width:=2E2416in;height:=2E1583in" id=3D"Picture_x002=
0_862996944" src=3D"cid:image002=2Epng@01DB4AF2=2E6954FC80"></span><span st=
yle=3D"font-size:9=2E0pt;font-family:"Arial",sans-serif;color:bla=
ck">This
is a <b>Safe Space=2E</b></span><span style=3D"font-size:12=2E0pt;font-fa=
mily:"Kalinga",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1=2E0pt;padding:3=2E0pt=
0in 0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"mso-ligatures:none">From:</span><=
/b><span style=3D"mso-ligatures:none"> Hunt, Ron (PERATON) <<a href=3D"m=
ailto:Ronald=2EHunt@peraton=2Ecom">Ronald=2EHunt@peraton=2Ecom</a>>
<br>
<b>Sent:</b> Tuesday, December 10, 2024 10:51 AM<br>
<b>To:</b> Barrier, Brie (PERATON) <<a href=3D"mailto:brie=2Ea=2Ebarrie=
r@peraton=2Ecom">brie=2Ea=2Ebarrier@peraton=2Ecom</a>>; Critzer, Judith =
(PERATON) <<a href=3D"mailto:judy=2Ecritzer@peraton=2Ecom">judy=2Ecritze=
r@peraton=2Ecom</a>>; Benveniste, Teri (PERATON) <<a href=3D"mailto:T=
eri=2EBenveniste@peraton=2Ecom">Teri=2EBenveniste@peraton=2Ecom</a>>;
Hunt, Ron (PERATON) <<a href=3D"mailto:Ronald=2EHunt@peraton=2Ecom">Ro=
nald=2EHunt@peraton=2Ecom</a>><br>
<b>Cc:</b> Cyber Vulnerability Management <<a href=3D"mailto:cybervulnm=
gmt@peraton=2Ecom">cybervulnmgmt@peraton=2Ecom</a>><br>
<b>Subject:</b> RE: 192=2E53=2E95=2E20/now =2E21 and =2E22<o:p></o:p></spa=
n></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p style=3D"margin:5=2E0pt"><span style=3D"font-size:10=2E0pt;font-family:=
"Calibri",sans-serif;color:black">PERATON CONFIDENTIAL AND/OR PRO=
PRIETARY INFORMATION - This email message and/or its attachment contains co=
nfidential and/or proprietary information of Peraton
Corp=2E (Peraton) that may only be received, disclosed, or used as author=
ized by Peraton=2E The information in this message may be exempt from relea=
se under the Freedom of Information Act=2E If you received this message in =
error, please delete all copies, and promptly
notify the sender=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif;mso-ligatures:none"><o:p> </o:p></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">Currently Bugizlla is at Stable release 5=2E2 and not 5=2E2+=2E 5=2E2=
doesn=E2=80=99t work with MySql 8=2E0 and thus doesn=E2=80=99t work with R=
HEL 8=2E So hopefully the NEXT Bugzilla release will include the fixes that
allows Bugzilla to work correctly with MySql 8=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">Per the Bugzilla support email:<o:p></o:p></span></p>
<p class=3D"MsoNormal">Here is the email string between Bugziila support a=
nd myself:<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none">Bugzilla doesn't=
currently work with MySQL 8=2E<br>
<br>
We're hoping to have MySQL 8 supported again in version 5=2E2=2E1 or so <s=
pan style=3D"background:yellow;mso-highlight:yellow">
(5=2E2 which is about to be released will probably have MySQL 8 blockliste=
d because the compatibility fixes aren't quite ready to land yet, it's an e=
xtremely invasive patch)</span><o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12=2E0pt"><span style=3D"mso=
-ligatures:none"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none">On January 2, 20=
24 7:37:08 AM EST, "Hunt, Ron (PERATON)" <<a href=3D"mailto:Ronald=2EHun=
t@peraton=2Ecom">Ronald=2EHunt@peraton=2Ecom</a>> wrote:<o:p></o:p></spa=
n></p>
<p class=3D"MsoNormal">Good morning,<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">I am currently in the process of upgrading my curre=
nt RHEL 7 =E2=80=93 MySql57 =E2=80=93 Bugzilla 5=2E0=2E6 to RHEL 8 =E2=80=
=93 MySql8=2E0 =E2=80=93 Bugzilla 5=2E0=2E6 due to RHEL 7 moving to end of =
life status=2E<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Once I have everything installed and ran the =2Eche=
cksetup=2Epl script, I am getting the following error due to MySql8=2E0 usi=
ng =E2=80=9Cgroup=E2=80=9D preventing Bugzilla to use it as a primary key:<=
o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">DBD::mysql::db selectrow_array failed: You have an =
error in your SQL syntax; check the manual that corresponds to your MySQL s=
erver version for the right syntax to use near 'groups where name =3D ''' a=
t line 1 [for Statement "SELECT id FROM
groups where name =3D ''"] at Bugzilla/Install/DB=2Epm line 2497=2E<o:p><=
/o:p></p>
<p class=3D"MsoNormal"> Bugzilla=
::Install::DB::_fix_group_with_empty_name() called at Bugzilla/Install/DB=
=2Epm line 358<o:p></o:p></p>
<p class=3D"MsoNormal"> Bugzilla=
::Install::DB::update_table_definitions(HASH(0x55dd82199cc8)) called at =2E=
/checksetup=2Epl line 175<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<div style=3D"border:none;border-bottom:solid windowtext 1=2E0pt;padding:0=
in 0in 1=2E0pt 0in">
<p class=3D"MsoNormal">Any suggestions on how to resolve this issue?<o:p><=
/o:p></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">So as soon as the next release is available I should then be able to =
upgrade Apache, RHEL, MySql and Bugzilla without conflict=2E<o:p></o:p></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">Please let me know if you need additional information regarding this =
issue=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">Thanks,<br>
Ron<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif"><o:p> </o:p></span></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1=2E0pt;padding:3=2E0pt=
0in 0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"mso-ligatures:none">From:</span><=
/b><span style=3D"mso-ligatures:none"> Barrier, Brie (PERATON) <<a href=
=3D"mailto:brie=2Ea=2Ebarrier@peraton=2Ecom">brie=2Ea=2Ebarrier@peraton=2Ec=
om</a>>
<br>
<b>Sent:</b> Tuesday, December 10, 2024 10:45 AM<br>
<b>To:</b> Hunt, Ron (PERATON) <<a href=3D"mailto:Ronald=2EHunt@peraton=
=2Ecom">Ronald=2EHunt@peraton=2Ecom</a>>; Critzer, Judith (PERATON) <=
<a href=3D"mailto:judy=2Ecritzer@peraton=2Ecom">judy=2Ecritzer@peraton=2Eco=
m</a>>; Benveniste, Teri (PERATON) <<a href=3D"mailto:Teri=2EBenvenis=
te@peraton=2Ecom">Teri=2EBenveniste@peraton=2Ecom</a>><br>
<b>Cc:</b> Cyber Vulnerability Management <<a href=3D"mailto:cybervulnm=
gmt@peraton=2Ecom">cybervulnmgmt@peraton=2Ecom</a>><br>
<b>Subject:</b> RE: 192=2E53=2E95=2E20/now =2E21 and =2E22<o:p></o:p></spa=
n></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p style=3D"margin:5=2E0pt"><span style=3D"font-size:10=2E0pt;font-family:=
"Calibri",sans-serif;color:black">PERATON CONFIDENTIAL AND/OR PRO=
PRIETARY INFORMATION - This email message and/or its attachment contains co=
nfidential and/or proprietary information of Peraton
Corp=2E (Peraton) that may only be received, disclosed, or used as author=
ized by Peraton=2E The information in this message may be exempt from relea=
se under the Freedom of Information Act=2E If you received this message in =
error, please delete all copies, and promptly
notify the sender=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif;mso-ligatures:none"><o:p> </o:p></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">Thanks, for clarification documentation states ver=
sions 2=2E2=2Ex and 2=2E4=2Ex are fully supported
<a href=3D"https://bugzilla=2Ereadthedocs=2Eio/en/latest/installing/apache=
-windows=2Ehtml">
3=2E5=2E2=2E Apache on Windows =E2=80=94 Bugzilla 5=2E2+ documentation</a>=
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">With that documentation what is the issue preventi=
ng deployment of version 2=2E4=2E62? Ill need links to the documentation if=
there is a bug I missed preventing that deployment and
I can then file the risk exception with that documentation=2E<o:p></o:p><=
/span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">Previously the hold up was due to MYSQL 8 not bein=
g supported (march 6<sup>th</sup> email)but with version 5=2E0=2E6/pr=
evious stable but with 5=2E2 it now is supported<a href=3D"https://www=2Ebu=
gzilla=2Eorg/releases/5=2E2/">5=2E2
- Bugzilla</a><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">Thanks<span style=3D"color:#404040">,</span></span=
><b><span style=3D"font-size:12=2E0pt;font-family:"Aptos",sans-se=
rif;mso-ligatures:none"><o:p></o:p></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:12=2E0pt;color:black">B=
rie Barrier</span><span style=3D"color:black"><o:p></o:p></span></b></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><i><span style=3D"fon=
t-size:12=2E0pt;font-family:"Aptos",sans-serif;color:black">Prono=
uns: She/Her/Hers<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt">Manager, Vulnera=
bility Management Team<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;color:black"><o:p=
> </o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12=2E0pt"><span style=3D"fon=
t-size:12=2E0pt;color:black">Office: (571)508-4192<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Kalinga",sans-serif;color:black;mso-ligatures:none"><img border=3D"0"=
width=3D"152" height=3D"43" style=3D"width:1=2E5833in;height:=2E45in" id=
=3D"Picture_x0020_99175215" src=3D"cid:image001=2Epng@01DB4AF2=2E6954FC80">=
</span><span style=3D"font-size:12=2E0pt;font-family:"Kalinga",sa=
ns-serif;color:black;mso-ligatures:none"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif;mso-ligatures:none"><img border=3D"0" width=3D"23" =
height=3D"15" style=3D"width:=2E2416in;height:=2E1583in" id=3D"Picture_x002=
0_581796884" src=3D"cid:image002=2Epng@01DB4AF2=2E6954FC80"></span><span st=
yle=3D"font-size:9=2E0pt;font-family:"Arial",sans-serif;color:bla=
ck">This
is a <b>Safe Space=2E</b></span><span style=3D"font-size:12=2E0pt;font-fa=
mily:"Kalinga",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1=2E0pt;padding:3=2E0pt=
0in 0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"mso-ligatures:none">From:</span><=
/b><span style=3D"mso-ligatures:none"> Hunt, Ron (PERATON) <<a href=3D"m=
ailto:Ronald=2EHunt@peraton=2Ecom">Ronald=2EHunt@peraton=2Ecom</a>>
<br>
<b>Sent:</b> Tuesday, December 10, 2024 9:49 AM<br>
<b>To:</b> Barrier, Brie (PERATON) <<a href=3D"mailto:brie=2Ea=2Ebarrie=
r@peraton=2Ecom">brie=2Ea=2Ebarrier@peraton=2Ecom</a>>; Critzer, Judith =
(PERATON) <<a href=3D"mailto:judy=2Ecritzer@peraton=2Ecom">judy=2Ecritze=
r@peraton=2Ecom</a>>; Hunt, Ron (PERATON) <<a href=3D"mailto:Ronald=
=2EHunt@peraton=2Ecom">Ronald=2EHunt@peraton=2Ecom</a>>;
Benveniste, Teri (PERATON) <<a href=3D"mailto:Teri=2EBenveniste@perato=
n=2Ecom">Teri=2EBenveniste@peraton=2Ecom</a>><br>
<b>Cc:</b> Cyber Vulnerability Management <<a href=3D"mailto:cybervulnm=
gmt@peraton=2Ecom">cybervulnmgmt@peraton=2Ecom</a>><br>
<b>Subject:</b> RE: 192=2E53=2E95=2E20/now =2E21 and =2E22<o:p></o:p></spa=
n></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p style=3D"margin:5=2E0pt"><span style=3D"font-size:10=2E0pt;font-family:=
"Calibri",sans-serif;color:black">PERATON CONFIDENTIAL AND/OR PRO=
PRIETARY INFORMATION - This email message and/or its attachment contains co=
nfidential and/or proprietary information of Peraton
Corp=2E (Peraton) that may only be received, disclosed, or used as author=
ized by Peraton=2E The information in this message may be exempt from relea=
se under the Freedom of Information Act=2E If you received this message in =
error, please delete all copies, and promptly
notify the sender=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif;mso-ligatures:none"><o:p> </o:p></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">Brie,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">We are still waiting for the Bugzilla release that will work with the=
updated Apache and RHEL versions=2E We are currently up to 5=2E2 and waiti=
ng for either 5=2E2=2E1 or higher to become the =E2=80=9CStable=E2=80=9D
version for public use=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif;mso-ligatures:none"><img border=3D"0" width=3D"914" height=3D"286" sty=
le=3D"width:9=2E525in;height:2=2E975in" id=3D"_x0000_i1035" src=3D"cid:imag=
e003=2Epng@01DB4AF2=2E6954FC80"></span><span style=3D"font-family:"Apt=
os",sans-serif"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">What actions do I need to take to refile this for a risk exception?<o=
:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">Thank you,<br>
Ron<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif"><o:p> </o:p></span></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1=2E0pt;padding:3=2E0pt=
0in 0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"mso-ligatures:none">From:</span><=
/b><span style=3D"mso-ligatures:none"> Barrier, Brie (PERATON) <<a href=
=3D"mailto:brie=2Ea=2Ebarrier@peraton=2Ecom">brie=2Ea=2Ebarrier@peraton=2Ec=
om</a>>
<br>
<b>Sent:</b> Tuesday, December 10, 2024 9:17 AM<br>
<b>To:</b> Hunt, Ron (PERATON) <<a href=3D"mailto:Ronald=2EHunt@peraton=
=2Ecom">Ronald=2EHunt@peraton=2Ecom</a>>; Critzer, Judith (PERATON) <=
<a href=3D"mailto:judy=2Ecritzer@peraton=2Ecom">judy=2Ecritzer@peraton=2Eco=
m</a>><br>
<b>Cc:</b> Cyber Vulnerability Management <<a href=3D"mailto:cybervulnm=
gmt@peraton=2Ecom">cybervulnmgmt@peraton=2Ecom</a>><br>
<b>Subject:</b> RE: 192=2E53=2E95=2E20/now =2E21 and =2E22<o:p></o:p></spa=
n></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p style=3D"margin:5=2E0pt"><span style=3D"font-size:10=2E0pt;font-family:=
"Calibri",sans-serif;color:black">PERATON CONFIDENTIAL AND/OR PRO=
PRIETARY INFORMATION - This email message and/or its attachment contains co=
nfidential and/or proprietary information of Peraton
Corp=2E (Peraton) that may only be received, disclosed, or used as author=
ized by Peraton=2E The information in this message may be exempt from relea=
se under the Freedom of Information Act=2E If you received this message in =
error, please delete all copies, and promptly
notify the sender=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif;mso-ligatures:none"><o:p> </o:p></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">No problem thanks for taking a look and let us kno=
w either way/if it cant be mitigated we will likely want to file this again=
for a risk exception=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">Thanks<span style=3D"color:#404040">,</span></span=
><b><span style=3D"font-size:12=2E0pt;font-family:"Aptos",sans-se=
rif;mso-ligatures:none"><o:p></o:p></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:12=2E0pt;color:black">B=
rie Barrier</span><span style=3D"color:black"><o:p></o:p></span></b></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><i><span style=3D"fon=
t-size:12=2E0pt;font-family:"Aptos",sans-serif;color:black">Prono=
uns: She/Her/Hers<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt">Manager, Vulnera=
bility Management Team<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;color:black"><o:p=
> </o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12=2E0pt"><span style=3D"fon=
t-size:12=2E0pt;color:black">Office: (571)508-4192<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Kalinga",sans-serif;color:black;mso-ligatures:none"><img border=3D"0"=
width=3D"152" height=3D"43" style=3D"width:1=2E5833in;height:=2E45in" id=
=3D"Picture_x0020_49553831" src=3D"cid:image001=2Epng@01DB4AF2=2E6954FC80">=
</span><span style=3D"font-size:12=2E0pt;font-family:"Kalinga",sa=
ns-serif;color:black;mso-ligatures:none"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif;mso-ligatures:none"><img border=3D"0" width=3D"23" =
height=3D"15" style=3D"width:=2E2416in;height:=2E1583in" id=3D"Picture_x002=
0_437172719" src=3D"cid:image002=2Epng@01DB4AF2=2E6954FC80"></span><span st=
yle=3D"font-size:9=2E0pt;font-family:"Arial",sans-serif;color:bla=
ck">This
is a <b>Safe Space=2E</b></span><span style=3D"font-size:12=2E0pt;font-fa=
mily:"Kalinga",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1=2E0pt;padding:3=2E0pt=
0in 0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"mso-ligatures:none">From:</span><=
/b><span style=3D"mso-ligatures:none"> Hunt, Ron (PERATON) <<a href=3D"m=
ailto:Ronald=2EHunt@peraton=2Ecom">Ronald=2EHunt@peraton=2Ecom</a>>
<br>
<b>Sent:</b> Tuesday, December 10, 2024 9:12 AM<br>
<b>To:</b> Barrier, Brie (PERATON) <<a href=3D"mailto:brie=2Ea=2Ebarrie=
r@peraton=2Ecom">brie=2Ea=2Ebarrier@peraton=2Ecom</a>>; Critzer, Judith =
(PERATON) <<a href=3D"mailto:judy=2Ecritzer@peraton=2Ecom">judy=2Ecritze=
r@peraton=2Ecom</a>>; Hunt, Ron (PERATON) <<a href=3D"mailto:Ronald=
=2EHunt@peraton=2Ecom">Ronald=2EHunt@peraton=2Ecom</a>><br>
<b>Cc:</b> Cyber Vulnerability Management <<a href=3D"mailto:cybervulnm=
gmt@peraton=2Ecom">cybervulnmgmt@peraton=2Ecom</a>><br>
<b>Subject:</b> RE: 192=2E53=2E95=2E20/now =2E21 and =2E22<o:p></o:p></spa=
n></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p style=3D"margin:5=2E0pt"><span style=3D"font-size:10=2E0pt;font-family:=
"Calibri",sans-serif;color:black">PERATON CONFIDENTIAL AND/OR PRO=
PRIETARY INFORMATION - This email message and/or its attachment contains co=
nfidential and/or proprietary information of Peraton
Corp=2E (Peraton) that may only be received, disclosed, or used as author=
ized by Peraton=2E The information in this message may be exempt from relea=
se under the Freedom of Information Act=2E If you received this message in =
error, please delete all copies, and promptly
notify the sender=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif;mso-ligatures:none"><o:p> </o:p></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">Good morning Brie and thank you for your patience in this matter=2E I=
will check and see if we can now move up to the latest Apache version alon=
g with RHEL without conflict with Bugzilla=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">More to follow=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif">Thanks,<br>
Ron<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Aptos",sans-s=
erif"><o:p> </o:p></span></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1=2E0pt;padding:3=2E0pt=
0in 0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"mso-ligatures:none">From:</span><=
/b><span style=3D"mso-ligatures:none"> Barrier, Brie (PERATON) <<a href=
=3D"mailto:brie=2Ea=2Ebarrier@peraton=2Ecom">brie=2Ea=2Ebarrier@peraton=2Ec=
om</a>>
<br>
<b>Sent:</b> Tuesday, December 10, 2024 8:38 AM<br>
<b>To:</b> Hunt, Ron (PERATON) <<a href=3D"mailto:Ronald=2EHunt@peraton=
=2Ecom">Ronald=2EHunt@peraton=2Ecom</a>>; Critzer, Judith (PERATON) <=
<a href=3D"mailto:judy=2Ecritzer@peraton=2Ecom">judy=2Ecritzer@peraton=2Eco=
m</a>><br>
<b>Cc:</b> Cyber Vulnerability Management <<a href=3D"mailto:cybervulnm=
gmt@peraton=2Ecom">cybervulnmgmt@peraton=2Ecom</a>><br>
<b>Subject:</b> RE: 192=2E53=2E95=2E20/now =2E21 and =2E22<o:p></o:p></spa=
n></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p style=3D"margin:5=2E0pt"><span style=3D"font-size:10=2E0pt;font-family:=
"Calibri",sans-serif;color:black">PERATON CONFIDENTIAL AND/OR PRO=
PRIETARY INFORMATION - This email message and/or its attachment contains co=
nfidential and/or proprietary information of Peraton
Corp=2E (Peraton) that may only be received, disclosed, or used as author=
ized by Peraton=2E The information in this message may be exempt from relea=
se under the Freedom of Information Act=2E If you received this message in =
error, please delete all copies, and promptly
notify the sender=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif;mso-ligatures:none"><o:p> </o:p></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">Good morning! Reaching out to check the status of =
updates on the GEX systems we observe in xpanse=2E
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">192=2E53=2E95=2E22:443 and 192=2E53=2E95=2E21:443 =
are flagging for outdated Apache webservers and are exposed publicly=2E&nbs=
p; Is it possible to update them to the latest versions? Full details
attached=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">192=2E53=2E95=2E21:Version detected 2=2E4=2E37<o:p=
></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">This issue flags Apache HTTP Servers that are know=
n to be below the current up-to-date secured versions suggested by Apache=
=2E Specifically, this issue flags versions prior to
2=2E4=2E62=2E Versions of Apache HTTP Server flagged by this policy are l=
ikely vulnerable to multiple known exploits, including CVE-2021-41773, CVE-=
2021-34798, CVE-2022-23943, CVE-2023-25690, CVE-2024-27316, and CVE-2024-40=
725=2E Version 2=2E4=2E62 addresses vulnerabilities
that were present in 2=2E4=2E61 and below=2E Note: This issue policy extr=
acts Apache's self reported version in the 'Server' header=2E Certain Linux=
/Unix vendors like Red Hat, CentOS, Debian, Ubuntu backport versions of ope=
n source packages like Apache, OpenSSH, PHP
and BIND=2E The term backporting describes the action of taking a fix for=
a security flaw out of the most recent version of an upstream software pac=
kage and applying that fix to an older version of the package distributed b=
y these Linux/Unix vendors=2E If the
'Server' header reports the underlying OS, this policy implies a potentia=
lly insecure version which may be backported=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">192=2E53=2E95=2E22: Version detected 2=2E4=2E6</sp=
an><b><span style=3D"font-size:12=2E0pt"><o:p></o:p></span></b></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">Apache HTTP Server, commonly called Apache, is an =
open-source cross-platform web server for Unix and Windows that is among th=
e most widely used web servers=2E Apache is developed
and maintained by the Apache Software Foundation=2E This issue flags Apac=
he HTTP Servers that are known to be below the current up-to-date secured v=
ersions suggested by Apache=2E Specifically, this issue flags versions prio=
r to 2=2E4=2E62=2E Versions of Apache HTTP
Server flagged by this policy are likely vulnerable to multiple known exp=
loits, including CVE-2021-41773, CVE-2021-34798, CVE-2022-23943, CVE-2023-2=
5690, CVE-2024-27316, and CVE-2024-40725=2E Version 2=2E4=2E62 addresses vu=
lnerabilities that were present in 2=2E4=2E61
and below=2E Note: This issue policy extracts Apache's self reported vers=
ion in the 'Server' header=2E Certain Linux/Unix vendors like Red Hat, Cent=
OS, Debian, Ubuntu backport versions of open source packages like Apache, O=
penSSH, PHP and BIND=2E The term backporting
describes the action of taking a fix for a security flaw out of the most =
recent version of an upstream software package and applying that fix to an =
older version of the package distributed by these Linux/Unix vendors=2E If =
the 'Server' header reports the underlying
OS, this policy implies a potentially insecure version which may be backp=
orted=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif">Thanks<span style=3D"color:#404040">,</span></span=
><b><span style=3D"font-size:12=2E0pt;font-family:"Aptos",sans-se=
rif;mso-ligatures:none"><o:p></o:p></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:12=2E0pt;color:black">B=
rie Barrier</span><span style=3D"color:black"><o:p></o:p></span></b></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><i><span style=3D"fon=
t-size:12=2E0pt;font-family:"Aptos",sans-serif;color:black">Prono=
uns: She/Her/Hers<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt">Manager, Vulnera=
bility Management Team<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;color:black"><o:p=
> </o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12=2E0pt"><span style=3D"fon=
t-size:12=2E0pt;color:black">Office: (571)508-4192<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Kalinga",sans-serif;color:black;mso-ligatures:none"><img border=3D"0"=
width=3D"152" height=3D"43" style=3D"width:1=2E5833in;height:=2E45in" id=
=3D"Picture_x0020_1275292096" src=3D"cid:image001=2Epng@01DB4AF2=2E6954FC80=
"></span><span style=3D"font-size:12=2E0pt;font-family:"Kalinga",=
sans-serif;color:black;mso-ligatures:none"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif;mso-ligatures:none"><img border=3D"0" width=3D"23" =
height=3D"15" style=3D"width:=2E2416in;height:=2E1583in" id=3D"Picture_x002=
0_428331664" src=3D"cid:image002=2Epng@01DB4AF2=2E6954FC80"></span><span st=
yle=3D"font-size:9=2E0pt;font-family:"Arial",sans-serif;color:bla=
ck">This
is a <b>Safe Space=2E</b></span><span style=3D"font-size:12=2E0pt;font-fa=
mily:"Kalinga",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif"><o:p> </o:p></span></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1=2E0pt;padding:3=2E0pt=
0in 0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"mso-ligatures:none">From:</span><=
/b><span style=3D"mso-ligatures:none"> Hunt, Ron (PERATON) <<a href=3D"m=
ailto:Ronald=2EHunt@peraton=2Ecom">Ronald=2EHunt@peraton=2Ecom</a>>
<br>
<b>Sent:</b> Wednesday, March 6, 2024 3:25 PM<br>
<b>To:</b> Barrier, Brie (PERATON) <<a href=3D"mailto:brie=2Ea=2Ebarrie=
r@peraton=2Ecom">brie=2Ea=2Ebarrier@peraton=2Ecom</a>>; Critzer, Judith =
(PERATON) <<a href=3D"mailto:judy=2Ecritzer@peraton=2Ecom">judy=2Ecritze=
r@peraton=2Ecom</a>><br>
<b>Cc:</b> Cyber Vulnerability Management <<a href=3D"mailto:cybervulnm=
gmt@peraton=2Ecom">cybervulnmgmt@peraton=2Ecom</a>>; Hunt, Ron (PERATON)=
<<a href=3D"mailto:Ronald=2EHunt@peraton=2Ecom">Ronald=2EHunt@peraton=
=2Ecom</a>><br>
<b>Subject:</b> RE: 192=2E53=2E95=2E20<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p style=3D"margin:5=2E0pt"><span style=3D"font-size:10=2E0pt;font-family:=
"Calibri",sans-serif;color:black">PERATON CONFIDENTIAL AND/OR PRO=
PRIETARY INFORMATION - This email message and/or its attachment contains co=
nfidential and/or proprietary information of Peraton
Corp=2E (Peraton) that may only be received, disclosed, or used as author=
ized by Peraton=2E The information in this message may be exempt from relea=
se under the Freedom of Information Act=2E If you received this message in =
error, please delete all copies, and promptly
notify the sender=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12=2E0pt;font-family:"=
;Aptos",sans-serif;mso-ligatures:none"><o:p> </o:p></span></p>
<div>
<p class=3D"MsoNormal">Brie,<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Currently there is no information on the projected =
release date for 5=2E1=2E2=2E Here is the information from the Bugzilla web=
site on their releases:<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<h1 style=3D"background:#EBECED"><span style=3D"font-family:"Arial&qu=
ot;,sans-serif;color:#28292A">Release Information<o:p></o:p></span></h1>
<h2 style=3D"background:#EBECED;font-size:var(--font-size-h2);font-variant=
-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;wi=
dows: 2;-webkit-text-stroke-width: 0px;text-decoration-thickness: initial;t=
ext-decoration-style: initial;text-decoration-color: initial;word-spacing:0=
px">
<span style=3D"font-family:"Arial",sans-serif;color:#28292A">Cur=
rent Releases and Change Policy<o:p></o:p></span></h2>
<ul type=3D"disc">
<li class=3D"MsoNormal" style=3D"color:#28292A;mso-margin-top-alt:auto;mso=
-margin-bottom-alt:auto;mso-list:l0 level1 lfo1;background:#EBECED">
<b><span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-se=
rif">Current Stable Release (<a href=3D"https://www=2Ebugzilla=2Eorg/releas=
es/5=2E0=2E6/">5=2E0=2E6</a>)</span></b><span style=3D"font-size:10=2E0pt;f=
ont-family:"Arial",sans-serif"><o:p></o:p></span></li></ul>
<ul type=3D"disc">
<ul type=3D"circle">
<li class=3D"MsoNormal" style=3D"color:#28292A;mso-margin-top-alt:auto;mso=
-margin-bottom-alt:auto;mso-list:l0 level2 lfo1;background:#EBECED">
<span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-serif=
">Includes bug fixes and performance improvements only<o:p></o:p></span></l=
i><li class=3D"MsoNormal" style=3D"color:#28292A;mso-margin-top-alt:auto;ms=
o-margin-bottom-alt:auto;mso-list:l0 level2 lfo1;background:#EBECED">
<span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-serif=
">No new features or large scale performance improvements<o:p></o:p></span>=
</li><li class=3D"MsoNormal" style=3D"color:#28292A;mso-margin-top-alt:auto=
;mso-margin-bottom-alt:auto;mso-list:l0 level2 lfo1;background:#EBECED">
<span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-serif=
">No database schema changes<o:p></o:p></span></li><li class=3D"MsoNormal" =
style=3D"color:#28292A;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;m=
so-list:l0 level2 lfo1;background:#EBECED">
<span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-serif=
">May contain documentation changes<o:p></o:p></span></li><li class=3D"MsoN=
ormal" style=3D"color:#28292A;mso-margin-top-alt:auto;mso-margin-bottom-alt=
:auto;mso-list:l0 level2 lfo1;background:#EBECED">
<span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-serif=
">No changes to templates that aren't part of bug fix, other than typos or =
grammatical fixes<o:p></o:p></span></li></ul>
</ul>
<ul type=3D"disc">
<li class=3D"MsoNormal" style=3D"color:#28292A;mso-margin-top-alt:auto;mso=
-margin-bottom-alt:auto;mso-list:l0 level1 lfo1;background:#EBECED">
<b><span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-se=
rif">Trunk (<a href=3D"https://www=2Ebugzilla=2Eorg/releases/6=2E0/">5=2E1=
=2E2</a>)</span></b><span style=3D"font-size:10=2E0pt;font-family:"Ari=
al",sans-serif"><o:p></o:p></span></li></ul>
<ul type=3D"disc">
<ul type=3D"circle">
<li class=3D"MsoNormal" style=3D"color:#28292A;mso-margin-top-alt:auto;mso=
-margin-bottom-alt:auto;mso-list:l0 level2 lfo1;background:#EBECED">
<span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-serif=
">Approved changes added constantly<o:p></o:p></span></li><li class=3D"MsoN=
ormal" style=3D"color:#28292A;mso-margin-top-alt:auto;mso-margin-bottom-alt=
:auto;mso-list:l0 level2 lfo1;background:#EBECED">
<span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-serif=
">Occasional development snapshots are released<o:p></o:p></span></li></ul>
</ul>
<ul type=3D"disc">
<li class=3D"MsoNormal" style=3D"color:#28292A;mso-margin-top-alt:auto;mso=
-margin-bottom-alt:auto;mso-list:l0 level1 lfo1;background:#EBECED">
<b><span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-se=
rif">Old Stable Release (<a href=3D"https://www=2Ebugzilla=2Eorg/releases/4=
=2E4=2E13/">4=2E4=2E13</a>)</span></b><span style=3D"font-size:10=2E0pt;fon=
t-family:"Arial",sans-serif"><o:p></o:p></span></li></ul>
<ul type=3D"disc">
<ul type=3D"circle">
<li class=3D"MsoNormal" style=3D"color:#28292A;mso-margin-top-alt:auto;mso=
-margin-bottom-alt:auto;mso-list:l0 level2 lfo1;background:#EBECED">
<span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-serif=
">Current policy is that 4 months after the next major release, support for=
the oldest stable release will be dropped=2E The other stable release will=
still be supported until four months after the next
major release=2E<o:p></o:p></span></li><li class=3D"MsoNormal" style=3D"c=
olor:#28292A;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0=
level2 lfo1;background:#EBECED">
<span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-serif=
">Contains security, crash, data loss, and selected critical fixes only<o:p=
></o:p></span></li><li class=3D"MsoNormal" style=3D"color:#28292A;mso-margi=
n-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level2 lfo1;backgroun=
d:#EBECED">
<span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-serif=
">No documentation changes unrelated to the above changes allowed<o:p></o:p=
></span></li></ul>
</ul>
<p style=3D"background:#EBECED;font-variant-ligatures: normal;font-variant=
-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-wid=
th: 0px;text-decoration-thickness: initial;text-decoration-style: initial;t=
ext-decoration-color: initial;word-spacing:0px">
<span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-serif=
;color:#28292A">Any release prior to the old stable release is unsupported=
=2E<o:p></o:p></span></p>
<h2 style=3D"background:#EBECED;font-size:var(--font-size-h2);font-variant=
-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;wi=
dows: 2;-webkit-text-stroke-width: 0px;text-decoration-thickness: initial;t=
ext-decoration-style: initial;text-decoration-color: initial;word-spacing:0=
px">
<span style=3D"font-family:"Arial",sans-serif;color:#28292A">Rel=
ease Dates<o:p></o:p></span></h2>
<p style=3D"background:#EBECED;font-variant-ligatures: normal;font-variant=
-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-wid=
th: 0px;text-decoration-thickness: initial;text-decoration-style: initial;t=
ext-decoration-color: initial;word-spacing:0px">
<span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-serif=
;color:#28292A">Here is a list of the release dates of every version of Bug=
zilla sorted by its branch=2E You can click on the version number for a lis=
t of release notes, download links, and security
advisories relevant to that release=2E<o:p></o:p></span></p>
<ul type=3D"disc">
<li class=3D"MsoNormal" style=3D"color:#28292A;mso-margin-top-alt:auto;mso=
-margin-bottom-alt:auto;mso-list:l1 level1 lfo2;background:#EBECED" id=3D"h=
eading50">
<span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-serif=
">5=2E0<o:p></o:p></span></li></ul>
<ul type=3D"disc">
<ul type=3D"circle">
<li class=3D"MsoNormal" style=3D"color:#28292A;mso-margin-top-alt:auto;mso=
-margin-bottom-alt:auto;mso-list:l1 level2 lfo2;background:#EBECED">
<span style=3D"font-size:10=2E0pt;font-family:"Arial",sans-serif=
"><a href=3D"https://www=2Ebugzilla=2Eorg/releases/5=2E0=2E6/">5=2E0=2E6</a=
> Feb 09, 2019<o:p></o:p></span></li></ul>
</ul>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Please let me know if there is anything else I can =
provide on this issue=2E<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Thanks,<br>
Ron<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1=2E0pt;padding:3=2E0pt=
0in 0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"mso-ligatures:none">From:</span><=
/b><span style=3D"mso-ligatures:none"> Barrier, Brie (PERATON) <<a href=
=3D"mailto:brie=2Ea=2Ebarrier@peraton=2Ecom">brie=2Ea=2Ebarrier@peraton=2Ec=
om</a>>
<br>
<b>Sent:</b> Wednesday, March 6, 2024 3:21 PM<br>
<b>To:</b> Hunt, Ron (PERATON) <<a href=3D"mailto:Ronald=2EHunt@peraton=
=2Ecom">Ronald=2EHunt@peraton=2Ecom</a>>; Critzer, Judith (PERATON) <=
<a href=3D"mailto:judy=2Ecritzer@peraton=2Ecom">judy=2Ecritzer@peraton=2Eco=
m</a>><br>
<b>Cc:</b> Cyber Vulnerability Management <<a href=3D"mailto:cybervulnm=
gmt@peraton=2Ecom">cybervulnmgmt@peraton=2Ecom</a>><br>
<b>Subject:</b> RE: 192=2E53=2E95=2E20<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p style=3D"margin:5=2E0pt"><span style=3D"font-size:10=2E0pt;color:black"=
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message a=
nd/or its attachment contains confidential and/or proprietary information o=
f Peraton Corp=2E (Peraton) that may only be
received, disclosed, or used as authorized by Peraton=2E The information =
in this message may be exempt from release under the Freedom of Information=
Act=2E If you received this message in error, please delete all copies, an=
d promptly notify the sender=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none"><o:p> </o:p=
></span></p>
<div>
<p class=3D"MsoNormal">Thanks for those details, yes it can be a bit of an=
issue=2E Because of that blocker and documentation do they have an estimat=
e on the release date of the 5=2E2=2E1 version that may support the updated=
mysql? That way then I can put in a risk
exception for tracking while we await a official vendor fix=2E<o:p></o:p>=
</p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<div>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none">Thanks<span styl=
e=3D"color:#404040">,</span></span><b><span style=3D"font-size:12=2E0pt;mso=
-ligatures:none"><o:p></o:p></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"color:black;mso-ligatures:none">B=
rie Barrier<o:p></o:p></span></b></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><i><span style=3D"col=
or:black;mso-ligatures:none">Pronouns: She/Her/Hers<o:p></o:p></span></i></=
p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none">Lead, Vulnerabil=
ity Management Team<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black;mso-ligatures:none"><o:p=
> </o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12=2E0pt"><span style=3D"col=
or:black;mso-ligatures:none">Office: (571)508-4192<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Kalinga",sans=
-serif;color:black;mso-ligatures:none"><img border=3D"0" width=3D"152" heig=
ht=3D"43" style=3D"width:1=2E5833in;height:=2E45in" id=3D"_x0000_i1030" src=
=3D"cid:image001=2Epng@01DB4AF2=2E6954FC80"></span><span style=3D"font-fami=
ly:"Kalinga",sans-serif;color:black;mso-ligatures:none"><o:p></o:=
p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none"><img border=3D"0=
" width=3D"23" height=3D"15" style=3D"width:=2E2416in;height:=2E1583in" id=
=3D"_x0000_i1029" src=3D"cid:image002=2Epng@01DB4AF2=2E6954FC80"></span><sp=
an style=3D"font-size:9=2E0pt;font-family:"Arial",sans-serif;colo=
r:black;mso-ligatures:none">This
is a <b>Safe Space=2E</b></span><span style=3D"font-family:"Kalinga&=
quot;,sans-serif;color:black;mso-ligatures:none"><o:p></o:p></span></p>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1=2E0pt;padding:3=2E0pt=
0in 0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"mso-ligatures:none">From:</span><=
/b><span style=3D"mso-ligatures:none"> Hunt, Ron (PERATON) <<a href=3D"m=
ailto:Ronald=2EHunt@peraton=2Ecom">Ronald=2EHunt@peraton=2Ecom</a>>
<br>
<b>Sent:</b> Wednesday, March 6, 2024 3:12 PM<br>
<b>To:</b> Barrier, Brie (PERATON) <<a href=3D"mailto:brie=2Ea=2Ebarrie=
r@peraton=2Ecom">brie=2Ea=2Ebarrier@peraton=2Ecom</a>>; Critzer, Judith =
(PERATON) <<a href=3D"mailto:judy=2Ecritzer@peraton=2Ecom">judy=2Ecritze=
r@peraton=2Ecom</a>><br>
<b>Cc:</b> Cyber Vulnerability Management <<a href=3D"mailto:cybervulnm=
gmt@peraton=2Ecom">cybervulnmgmt@peraton=2Ecom</a>>; Hunt, Ron (PERATON)=
<<a href=3D"mailto:Ronald=2EHunt@peraton=2Ecom">Ronald=2EHunt@peraton=
=2Ecom</a>><br>
<b>Subject:</b> RE: 192=2E53=2E95=2E20<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p style=3D"margin:5=2E0pt"><span style=3D"font-size:10=2E0pt;color:black"=
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message a=
nd/or its attachment contains confidential and/or proprietary information o=
f Peraton Corp=2E (Peraton) that may only be
received, disclosed, or used as authorized by Peraton=2E The information =
in this message may be exempt from release under the Freedom of Information=
Act=2E If you received this message in error, please delete all copies, an=
d promptly notify the sender=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none"><o:p> </o:p=
></span></p>
<div>
<p class=3D"MsoNormal">Hello Brie,<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">So we are currently on RHEL 7 for our Bugzilla serv=
er which only supports Apache (httpd 2=2E4=2E6)=2E RHEL 8 is available, how=
ever RHEL 8 has a problem with our MySql Database which stores our Bugzilla=
application=2E Bugzilla software is working
on a solution but has yet to deploy it for public use=2E Long story short=
is that I am currently stuck between Bugzilla and RedHat regarding the ser=
ver version until one is working well with the other=2E<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Here is the email string between Bugziila support a=
nd myself:<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none">Bugzilla doesn't=
currently work with MySQL 8=2E<br>
<br>
We're hoping to have MySQL 8 supported again in version 5=2E2=2E1 or so (5=
=2E2 which is about to be released will probably have MySQL 8 blocklisted b=
ecause the compatibility fixes aren't quite ready to land yet, it's an extr=
emely invasive patch)<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12=2E0pt"><span style=3D"mso=
-ligatures:none"><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none">On January 2, 20=
24 7:37:08 AM EST, "Hunt, Ron (PERATON)" <<a href=3D"mailto:Ronald=2EHun=
t@peraton=2Ecom">Ronald=2EHunt@peraton=2Ecom</a>> wrote:<o:p></o:p></spa=
n></p>
<p class=3D"MsoNormal">Good morning,<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">I am currently in the process of upgrading my curre=
nt RHEL 7 =E2=80=93 MySql57 =E2=80=93 Bugzilla 5=2E0=2E6 to RHEL 8 =E2=80=
=93 MySql8=2E0 =E2=80=93 Bugzilla 5=2E0=2E6 due to RHEL 7 moving to end of =
life status=2E<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Once I have everything installed and ran the =2Eche=
cksetup=2Epl script, I am getting the following error due to MySql8=2E0 usi=
ng =E2=80=9Cgroup=E2=80=9D preventing Bugzilla to use it as a primary key:<=
o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">DBD::mysql::db selectrow_array failed: You have an =
error in your SQL syntax; check the manual that corresponds to your MySQL s=
erver version for the right syntax to use near 'groups where name =3D ''' a=
t line 1 [for Statement "SELECT id FROM
groups where name =3D ''"] at Bugzilla/Install/DB=2Epm line 2497=2E<o:p><=
/o:p></p>
<p class=3D"MsoNormal"> Bugzilla=
::Install::DB::_fix_group_with_empty_name() called at Bugzilla/Install/DB=
=2Epm line 358<o:p></o:p></p>
<p class=3D"MsoNormal"> Bugzilla=
::Install::DB::update_table_definitions(HASH(0x55dd82199cc8)) called at =2E=
/checksetup=2Epl line 175<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Any suggestions on how to resolve this issue?<o:p><=
/o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Thank you,<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<div style=3D"border:none;border-bottom:solid windowtext 1=2E0pt;padding:0=
in 0in 1=2E0pt 0in">
<p class=3D"MsoNormal">Ron<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">I am still waiting on the latest release from Bugzi=
lla to attempt to clear this issue=2E<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Thanks,<br>
Ron<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1=2E0pt;padding:3=2E0pt=
0in 0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"mso-ligatures:none">From:</span><=
/b><span style=3D"mso-ligatures:none"> Barrier, Brie (PERATON) <<a href=
=3D"mailto:brie=2Ea=2Ebarrier@peraton=2Ecom">brie=2Ea=2Ebarrier@peraton=2Ec=
om</a>>
<br>
<b>Sent:</b> Wednesday, March 6, 2024 1:43 PM<br>
<b>To:</b> Hunt, Ron (PERATON) <<a href=3D"mailto:Ronald=2EHunt@peraton=
=2Ecom">Ronald=2EHunt@peraton=2Ecom</a>>; Critzer, Judith (PERATON) <=
<a href=3D"mailto:judy=2Ecritzer@peraton=2Ecom">judy=2Ecritzer@peraton=2Eco=
m</a>><br>
<b>Cc:</b> Cyber Vulnerability Management <<a href=3D"mailto:cybervulnm=
gmt@peraton=2Ecom">cybervulnmgmt@peraton=2Ecom</a>><br>
<b>Subject:</b> RE: 192=2E53=2E95=2E20<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p style=3D"margin:5=2E0pt"><span style=3D"font-size:10=2E0pt;color:black"=
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message a=
nd/or its attachment contains confidential and/or proprietary information o=
f Peraton Corp=2E (Peraton) that may only be
received, disclosed, or used as authorized by Peraton=2E The information =
in this message may be exempt from release under the Freedom of Information=
Act=2E If you received this message in error, please delete all copies, an=
d promptly notify the sender=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none"><o:p> </o:p=
></span></p>
<div>
<p class=3D"MsoNormal">Great thank you! <o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<div>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none">Thanks<span styl=
e=3D"color:#404040">,</span></span><b><span style=3D"font-size:12=2E0pt;mso=
-ligatures:none"><o:p></o:p></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"color:black;mso-ligatures:none">B=
rie Barrier<o:p></o:p></span></b></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><i><span style=3D"col=
or:black;mso-ligatures:none">Pronouns: She/Her/Hers<o:p></o:p></span></i></=
p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none">Lead, Vulnerabil=
ity Management Team<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black;mso-ligatures:none"><o:p=
> </o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12=2E0pt"><span style=3D"col=
or:black;mso-ligatures:none">Office: (571)508-4192<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Kalinga",sans=
-serif;color:black;mso-ligatures:none"><img border=3D"0" width=3D"152" heig=
ht=3D"43" style=3D"width:1=2E5833in;height:=2E45in" id=3D"Picture_x0020_4" =
src=3D"cid:image001=2Epng@01DB4AF2=2E6954FC80"></span><span style=3D"font-f=
amily:"Kalinga",sans-serif;color:black;mso-ligatures:none"><o:p><=
/o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none"><img border=3D"0=
" width=3D"23" height=3D"15" style=3D"width:=2E2416in;height:=2E1583in" id=
=3D"Picture_x0020_1" src=3D"cid:image002=2Epng@01DB4AF2=2E6954FC80"></span>=
<span style=3D"font-size:9=2E0pt;font-family:"Arial",sans-serif;c=
olor:black;mso-ligatures:none">This
is a <b>Safe Space=2E</b></span><span style=3D"font-family:"Kalinga&=
quot;,sans-serif;color:black;mso-ligatures:none"><o:p></o:p></span></p>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1=2E0pt;padding:3=2E0pt=
0in 0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"mso-ligatures:none">From:</span><=
/b><span style=3D"mso-ligatures:none"> Hunt, Ron (PERATON) <</span><a hr=
ef=3D"mailto:Ronald=2EHunt@peraton=2Ecom"><span style=3D"mso-ligatures:none=
">Ronald=2EHunt@peraton=2Ecom</span></a><span style=3D"mso-ligatures:none">=
>
<br>
<b>Sent:</b> Wednesday, March 6, 2024 12:14 PM<br>
<b>To:</b> Barrier, Brie (PERATON) <</span><a href=3D"mailto:brie=2Ea=
=2Ebarrier@peraton=2Ecom"><span style=3D"mso-ligatures:none">brie=2Ea=2Ebar=
rier@peraton=2Ecom</span></a><span style=3D"mso-ligatures:none">>; Critz=
er, Judith (PERATON) <</span><a href=3D"mailto:judy=2Ecritzer@peraton=2E=
com"><span style=3D"mso-ligatures:none">judy=2Ecritzer@peraton=2Ecom</span>=
</a><span style=3D"mso-ligatures:none">><br>
<b>Cc:</b> Cyber Vulnerability Management <</span><a href=3D"mailto:cyb=
ervulnmgmt@peraton=2Ecom"><span style=3D"mso-ligatures:none">cybervulnmgmt@=
peraton=2Ecom</span></a><span style=3D"mso-ligatures:none">><br>
<b>Subject:</b> RE: 192=2E53=2E95=2E20<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p style=3D"margin:5=2E0pt"><span style=3D"font-size:10=2E0pt;color:black"=
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message a=
nd/or its attachment contains confidential and/or proprietary information o=
f Peraton Corp=2E (Peraton) that may only be
received, disclosed, or used as authorized by Peraton=2E The information =
in this message may be exempt from release under the Freedom of Information=
Act=2E If you received this message in error, please delete all copies, an=
d promptly notify the sender=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none"><o:p> </o:p=
></span></p>
<div>
<p class=3D"MsoNormal">Good morning Brie,<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Yes, I will take a look and see if I can get this r=
esolved ASAP=2E<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Thanks,<o:p></o:p></p>
<p class=3D"MsoNormal">Ron<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1=2E0pt;padding:3=2E0pt=
0in 0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"mso-ligatures:none">From:</span><=
/b><span style=3D"mso-ligatures:none"> Barrier, Brie (PERATON) <</span><=
a href=3D"mailto:brie=2Ea=2Ebarrier@peraton=2Ecom"><span style=3D"mso-ligat=
ures:none">brie=2Ea=2Ebarrier@peraton=2Ecom</span></a><span style=3D"mso-li=
gatures:none">>
<br>
<b>Sent:</b> Wednesday, March 6, 2024 12:08 PM<br>
<b>To:</b> Hunt, Ron (PERATON) <</span><a href=3D"mailto:Ronald=2EHunt@=
peraton=2Ecom"><span style=3D"mso-ligatures:none">Ronald=2EHunt@peraton=2Ec=
om</span></a><span style=3D"mso-ligatures:none">>; Critzer, Judith (PERA=
TON) <</span><a href=3D"mailto:judy=2Ecritzer@peraton=2Ecom"><span style=
=3D"mso-ligatures:none">judy=2Ecritzer@peraton=2Ecom</span></a><span style=
=3D"mso-ligatures:none">><br>
<b>Cc:</b> Cyber Vulnerability Management <</span><a href=3D"mailto:cyb=
ervulnmgmt@peraton=2Ecom"><span style=3D"mso-ligatures:none">cybervulnmgmt@=
peraton=2Ecom</span></a><span style=3D"mso-ligatures:none">><br>
<b>Subject:</b> 192=2E53=2E95=2E20<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p style=3D"margin:5=2E0pt"><span style=3D"font-size:10=2E0pt;color:black"=
>PERATON CONFIDENTIAL AND/OR PROPRIETARY INFORMATION - This email message a=
nd/or its attachment contains confidential and/or proprietary information o=
f Peraton Corp=2E (Peraton) that may only be
received, disclosed, or used as authorized by Peraton=2E The information =
in this message may be exempt from release under the Freedom of Information=
Act=2E If you received this message in error, please delete all copies, an=
d promptly notify the sender=2E<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none"><o:p> </o:p=
></span></p>
<div>
<p class=3D"MsoNormal">Good morning!<o:p></o:p></p>
<p class=3D"MsoNormal">Your Bugzilla site at 192=2E53=2E95=2E20 popped for=
a few security issues recently so I was hoping you could take a look to re=
view=2E All the issues seem to tie back to the apache http server supportin=
g bugzilla<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">The critical issues <o:p></o:p></p>
<p class=3D"MsoNormal"><a href=3D"https://www=2Ecvedetails=2Ecom/cve/CVE-2=
022-22720">CVE-2022-22720 : Apache HTTP Server 2=2E4=2E52 and earlier fails=
to close inbound connection when errors are encountered discarding the req=
ue (cvedetails=2Ecom)</a><o:p></o:p></p>
<p class=3D"MsoNormal"><a href=3D"https://www=2Ecvedetails=2Ecom/cve/CVE-2=
021-39275">CVE-2021-39275 : ap_escape_quotes() may write beyond the end of =
a buffer when given malicious input=2E No included modules pass untrusted d=
(cvedetails=2Ecom)</a><o:p></o:p></p>
<p class=3D"MsoNormal"><a href=3D"https://www=2Ecvedetails=2Ecom/cve/CVE-2=
022-22721">CVE-2022-22721 : If LimitXMLRequestBody is set to allow request =
bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer ov (=
cvedetails=2Ecom)</a><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">High issues<o:p></o:p></p>
<p class=3D"MsoNormal"><a href=3D"https://www=2Ecvedetails=2Ecom/cve/CVE-2=
021-34798">CVE-2021-34798 : Malformed requests may cause the server to dere=
ference a NULL pointer=2E This issue affects Apache HTTP Server 2=2E4=2E48 =
and (cvedetails=2Ecom)</a><o:p></o:p></p>
<p class=3D"MsoNormal"><a href=3D"https://www=2Ecvedetails=2Ecom/cve/CVE-2=
022-22719">CVE-2022-22719 : A carefully crafted request body can cause a re=
ad to a random memory area which could cause the process to crash=2E This i=
(cvedetails=2Ecom)</a><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">The latest release for apache 2=2E4 appears to be 2=
=2E4=2E58 which came out in October, could it be applied to clear these iss=
ues?<o:p></o:p></p>
<p class=3D"MsoNormal"><a href=3D"https://downloads=2Eapache=2Eorg/httpd/A=
nnouncement2=2E4=2Ehtml">Apache HTTP Server Project</a><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none">Thanks<span styl=
e=3D"color:#404040">,</span></span><b><span style=3D"font-size:12=2E0pt;mso=
-ligatures:none"><o:p></o:p></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"color:black;mso-ligatures:none">B=
rie Barrier<o:p></o:p></span></b></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><i><span style=3D"col=
or:black;mso-ligatures:none">Pronouns: She/Her/Hers<o:p></o:p></span></i></=
p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none">Lead, Vulnerabil=
ity Management Team<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black;mso-ligatures:none"><o:p=
> </o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12=2E0pt"><span style=3D"col=
or:black;mso-ligatures:none">Office: (571)508-4192<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:"Kalinga",sans=
-serif;color:black;mso-ligatures:none"><img border=3D"0" width=3D"152" heig=
ht=3D"43" style=3D"width:1=2E5833in;height:=2E45in" id=3D"Picture_x0020_2" =
src=3D"cid:image001=2Epng@01DB4AF2=2E6954FC80"></span><span style=3D"font-f=
amily:"Kalinga",sans-serif;color:black;mso-ligatures:none"><o:p><=
/o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-ligatures:none"><img border=3D"0=
" width=3D"23" height=3D"15" style=3D"width:=2E2416in;height:=2E1583in" id=
=3D"Picture_x0020_3" src=3D"cid:image002=2Epng@01DB4AF2=2E6954FC80"></span>=
<span style=3D"font-size:9=2E0pt;font-family:"Arial",sans-serif;c=
olor:black;mso-ligatures:none">This
is a <b>Safe Space=2E</b></span><span style=3D"font-family:"Kalinga&=
quot;,sans-serif;color:black;mso-ligatures:none"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote></div><div dir=3D"auto"><div class=3D'k9mail-signature'>-- <b=
r>Sent from my Android phone with K-9 Mail=2E Please excuse my brevity=2E</=
div></div></body>
</html>
------A6JCYTMXYSNRHJDB9EKYJK2D025SCS--
--===============4933145702615927503==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
support-list mailing list
[email protected]
https://lists.bugzilla.org/listinfo/support-list
--===============4933145702615927503==--