Skip to Content

UBC IT Bulletins

Printer-friendly PDF version
Syndicate content
Updated: 5 days 23 hours ago

CWL Authentication Service (Auth2) Maintenance Oct 04, 2017 16:00-16:30 PT

October 3, 2017 - 1:42pm

The CWL Authentication Service (Auth2) will be undergoing maintenance on Wednesday Oct 04, 2017 16:00-16:30 PT.

There will be no service disruption during the maintenance window.

Update – Intermittent FASMail Connectivity – 2 October 2017 17:00 PT

October 1, 2017 - 8:30pm

The following message is being shared with the campus community on FASMail connectivity issues that some campus users may have been experiencing recently.

Further to our last post from earlier this afternoon, the Email team has made a number of changes based on Microsoft’s recommendations. Since implementing these changes, we noticed a decline in dropped connectivity issues. However, we will continue to assess the situation to see if this makes a sustained difference. If you are continuing to experience Outlook connectivity issues (first time or otherwise), please submit a ticket to the IT Service Centre, noting specifically the time of the incident along with the behaviour experienced. We will provide further updates tomorrow as we continue to monitor the situation.

Regards,
Mark Belsito | Manager, Operations
Communication & Collaboration Services, IT

Course Reserves database update Oct 2, 2017 22:00-23:00 PT

October 1, 2017 - 8:25pm

The Library Course Reserves database server will be updated. There will be a short (10 minute) service interruption during data transfer to the new server.

ILS Voyager Maintenance Sept 30, 2017 22:15 – 23:59 PT

September 30, 2017 - 2:45pm

Voyager servers will undergo scheduled maintenance on Saturday, September 30 from 22:15 to 23:59. During this maintenance window, Integrated Library services including acquisitions, circulation and cataloguing will be unavailable.

UPDATE: FASmail Connectivity – 29 Sept 2017 18:00 PT

September 29, 2017 - 7:55pm

IT and Microsoft teams are working on this incident throughout the weekend. Users experiencing Outlook connectivity issues should submit a ticket, noting the time of the incident. Further updates will be provided as new developments occur.

ServiceNow Scheduled Maintenance Sept 29, 2017 20:00 – 21:00 PT

September 29, 2017 - 7:50pm

Please be advised that on September 29, 2017 at 20:00, ServiceNow will be undergoing scheduled maintenance. As part of this maintenance, users may experience a brief service interruption lasting less than 5 minutes.

Forest Sciences Centre Network Upgrade September 28th, 2017 06:00-07:00 PT

September 28, 2017 - 7:00am

Network maintenance is being performed on the FRSC01 Network in the Forest Sciences Centre to facilitate upgrades, as part of the Network Switch Replacement Program. During this service window on Thursday, September 28th, 2017 between 06:00-07:00 PT, all wired and wireless network services in the Forest Sciences Centre will be unavailable as the upgrade takes place.

Nine Vulnerabilities Found in WordPress

September 28, 2017 - 5:15am

Nine vulnerabilities have recently been detected in WordPress, including five cross-site scripting errors.  An update to WordPress version 4.8.2 will resolve this issue and address other maintenance issues in WordPress.

Security Risk: High

Action:

  1. Update immediately to 4.8.2
  2. It is recommended that automatic updates be enabled on WordPress sites

WordPress websites hosted by CTLT

If your WordPress website is hosted by CTLT (cms.ubc.ca), CTLT has addressed the upgrade already.

Additional Information

https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/

If you have any questions, please contact security@ubc.ca

 

Google Chrome Phasing out Symantec CA Certificates

September 28, 2017 - 5:00am

As a result of Symantec’s mis-issuance of end-entity certificates, Google Chrome, and other browsers such as Mozilla Firefox, are commencing a process of progressively distrusting Symantec CA certificates over time. Once a CA certificate is no longer trusted, Chrome users visiting sites configured to use end-entity certificates issued under the distrusted CA certificate will be prevented from viewing the site. This change has stemmed from an ongoing history of Symantec mishandling the issuance of X.509 certificates, which violated many browser vendors’ trust.

 

This process of progressively distrusting Symantec CA certificates will impact services (primarily web sites using https) configured to use end-entity certificates issued by Symantec and Symantec’s subsidiaries including Thawte, GeoTrust, RapidSSL, and VeriSign.

 

Symantec has announced they are transferring control of their certificate business to DigiCert, who will begin issuing certificates for Thawte, GeoTrust, RapidSSL, and Verisign in December.

 

Below is a timeline of Google Chrome’s phasing out process:

 

Timeline:

December 1, 2017 DigiCert will begin issuing new trusted Thawte, GeoTrust, RapidSSL, or Verisign certs.  Certificates obtained from DigiCert after this date will not be phased out by Chrome. April 17, 2018 [approx.] Chrome 66 released, no longer trusts certificates issued by Symantec, or any certificate issued by Symantec CA subsidiaries prior to June 1, 2016. October 23, 2018 [approx.] Chrome 70 released, no longer trusts any certificates issued by Symantec CAs prior to December 1, 2017.

 

If you manage desktops, you may experience an influx of reports of insecure sites starting mid-April 2018.

 

Actions to take:

 

If you manage web servers or web sites:

o    Check your sites to see if any are using a certificate issued by a Symantec CA – this includes Symantec, Thawte, GeoTrust, RapidSSL, and Verisign.

o    If your certificate is issued by Symantec or any of the Symantec certificate subsidiaries, including Thawte, GeoTrust, RapidSSL, or Verisign:

  • Certs issued prior to June 1, 2016 will be valid until April 17, 2018.  You may obtain a new copy of your cert, which will be trusted by Chrome until October 23, 2018 or the expiration date on the cert, whichever comes first.
  • Certs issued after June 1, 2016 will be valid in Chrome until October 23, 2018.
  • In either case, you will need to replace your cert with a new cert to avoid being impacted by the October 23, 2018 deadline.
  • Obtain a new copy of your cert from your existing CA after December 1, 2017.  This cert will be issued by the DigiCert infrastructure, and will be trusted by Chrome until the expiration date on the cert.  This is not an option for certs issued directly from Symantec.
  • Alternatively, you can switch to a new cert immediately provided it is issued by a trusted non-Symantec CA

o    If you need new certs, you can obtain no-cost certs from UBC IT by following the instructions here: https://confluence.it.ubc.ca/display/ITSecurity/how+to+obtain%2C+deploy+and+verify+an+X.509+certificate

 

If you have any questions, please contact security@ubc.ca

 

Additional Information:

https://security.googleblog.com/2017/09/chromes-plan-to-distrust-symantec.html

https://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/eUAKwjihhBs%5B1-25%5D

 

FASmail Email Service Maintenance Sept 27, 2017 22:00 – 23:00 PT

September 27, 2017 - 6:59pm

On September 27, 2017 22:00 – 23:00 PT, UBC IT will perform system maintenance on the UBC FASmail Email Service.   Users will be prompted to re-authenticate.

UBC IT eSirius Animal Care System application upgrade September 27, 2017 15:00 – 19:00 PT

September 26, 2017 - 6:22pm

The eSirius Animal Care System application will not be available from 15:00 to 19:00 PT on Wednesday, September 27, 2017 due to required updates.

If you have any questions please contact Academic Systems at sis.support@ubc.ca.

UPDATE: Intermittent FASmail Connectivity – 27 Sept 2017 15:00 PT

September 26, 2017 - 3:28pm

Further to our communication earlier this afternoon, users may still be experiencing intermittent connectivity or performance issues with the FASmail service when using Outlook. The Email team has identified a potential root cause, and continues to work directly with Microsoft to investigate and resolve this matter.

 

More details will be shared as they become available.

Dairy Education Research Centre in Agassiz Network Issue September 26, 2017 13:15 PT

September 26, 2017 - 1:37pm

There is currently a network outage at the Dairy Education Researching building.

Technicians are currently working on investigating and resolving the issue.

 

Course Reserves database update Sep 26, 2017 22:00-23:00 PT

September 26, 2017 - 11:13am

The Library Course Reserves database server will be updated. There will be a short (10 minute) service interruption during data transfer to the new server.

FASmail Email Service Maintenance Sept 25, 2017 21:00 – 23:00 PT

September 25, 2017 - 2:37am

On September 25, 2017 21:00 – 23:00 PT, UBC IT will perform system maintenance on the UBC FASmail Email Service. Users will be prompted to re-authenticate.