openSUSE admin

crameleon wrote:

The VM is currently not running. Can someone verify if this is intentional? If not, I would boot it again, and update it to the latest version of LimeSurvey if it is not up to date already - we have 5.4.5 in https://build.opensuse.org/package/show/openSUSE:infrastructure/limesurvey already, and only 5.4.4 is affected according to the CVE.

My guess - as we have no current surveys running, it was probably stopped intentionally. Let's boot it up and check what it's running. If necessary update it, otherwise just shut it down again.

Had to repair this:

Afterwards I updated the packages, but could not update LimeSurvey, because I just noticed we don't have any built binaries for 5.4 - only the sources were updated in the project, but they fail to build.

I shut the machine down again and submitted https://build.opensuse.org/request/show/1036955.

Is now running with version 6.1.0, still needs to be correctly packaged, but tracking further in the new ticket as the security problem should be resolved.