Skip to Content

UBC IT Bulletins

Printer-friendly PDF version
Syndicate content
Updated: 35 min 58 sec ago

LINKS & DAE PCI Systems Network & Firewall Maintenance Apr 04, 2018 10:00 – 17:00 PT

March 29, 2018 - 4:28pm

DAE is performing semi-annual maintenance on its firewall rules related to its PCI systems (LINKS and other donations processing systems) in order to ensure system security. Due to the changes, some users may experience issues with their connectuions to LINKS (Blackbaud CRM) disrupted. Should you lose access to LINKS or other DAE systems, please contact DAE IT immediately at dae.it@ubc.ca.

Sauder Web Payment Gateway database maintenance April 5, 2018 19:00 – 21:00 PT

March 29, 2018 - 4:27pm

The Sauder Web Payment Gateway application will not be available from 19:00 to 21:00 PT on Thursday April 5, 2018 due to required database maintenance.

If you have any questions please contact Academic Systems at sis.support@ubc.ca.

Sauder Crystal Report (WPG) database maintenance April 5, 2018 21:00 – 23:00 PT

March 29, 2018 - 4:26pm

The Sauder Crystal Report (WPG) application will not be available from 21:00 to 23:00 PT on Thursday April 5, 2018 due to required database maintenance.

If you have any questions please contact Academic Systems at sis.support@ubc.ca.

Web Services Drupal 7 platform maintenance Apr 5, 2018 22:00 – 23:00 PT

March 29, 2018 - 4:25pm

The Web Services Drupal 7 platform will be undergoing maintenance and will be unavailable for the duration of the change window.

The following websites and any websites hosted on Web Services’ Drupal 7 platform will be affected:

3d-bioprinting.pwias.ubc.ca
activehealth.ubc.ca
after-the-ink-dries.pwias.ubc.ca
agrifoodwp.dp7prod.webi.it.ubc.ca
air.ubc.ca
arc.ubc.ca
aril-register.ca
artisanalmining.pwias.ubc.ca
balancefalls.ubc.ca
biodiversity.ubc.ca
bookstore.ubc.ca
printservices.ubc.ca
cancerprevent.ca
ccel.ubc.ca
childhealth.pwias.ubc.ca
cio.ubc.ca
cms.science.ubc.ca
commerce.sala.ubc.ca
conservationfinance.pwias.ubc.ca
consultations.students.ubc.ca
continuingstudies.sauder.ubc.ca
cpd.pharmacy.ubc.ca
criticalpedagogies.pwias.ubc.ca
csp.science.ubc.ca
database.sustain.ubc.ca
datascience.ubc.ca
development.universitycounsel.ubc.ca
dsi.ubc.ca
eastasia-manuscripts.pwias.ubc.ca
ebola.pwias.ubc.ca
epayment.it.ubc.ca
events.pharmacy.ubc.ca
events.pwias.ubc.ca
events.sbqmi.ubc.ca
example.it.ubc.ca
extendedlearning.ubc.ca
faculty.students.ubc.ca
facultystaff.students.ubc.ca
finance.ubc.ca
greencollege.ubc.ca
greenrainbows.pwias.ubc.ca
grex.ubc.ca
health.ubc.ca
herring.pwias.ubc.ca
historyproject.allard.ubc.ca
hrfin.ubc.ca
iembp.midwifery.ubc.ca
indigenousscience.ubc.ca
integrated-renewal.ubc.ca
intsci.ubc.ca
it.apsc.ubc.ca
languagesciences.ubc.ca
latermodernwar.pwias.ubc.ca
learningspaces.ok.ubc.ca
learningspaces.ubc.ca
lostandfound.ubc.ca
memory.pwias.ubc.ca
memorysymposium.pwias.ubc.ca
migration.ubc.ca
mnchtech.pwias.ubc.ca
mybcom.sauder.ubc.ca
nanomedicine.ubc.ca
nursing.ubc.ca
oee.pharmacy.ubc.ca
ors.ubc.ca
outdoorplay.pwias.ubc.ca
parking.ubc.ca
payment.grad.ubc.ca
payment.sciencecoop.ubc.ca
pharmsci.ubc.ca
planning.ubc.ca
privacymatters.ubc.ca
qualtrics.dp7prod.webi.it.ubc.ca
rankings.pwias.ubc.ca
re-imagine-aging.pwias.ubc.ca
register.scarp.ubc.ca
research.ubc.ca
safetyabroad.ubc.ca
sala.ubc.ca
sasi.ubc.ca
sauderalumnicareers.ca
sba.ubc.ca
sbqmi.ubc.ca
scarp.ubc.ca
science.ubc.ca
sciencecoop.ubc.ca
scienceone.ubc.ca
sds.ubc.ca
senate.ubc.ca
seniorapptscommittee.hr.ubc.ca
sequencing.ubc.ca
siepic.ubc.ca
skylight.science.ubc.ca
smilingtotheirfaces.pwias.ubc.ca
socialtransformation.pwias.ubc.ca
sparc.ubc.ca
spontaneity.pwias.ubc.ca
studentplacements.universitycounsel.ubc.ca
students.ubc.ca
supplymanagement.universitycounsel.ubc.ca
sustain.ubc.ca
therapeuticseducation.org
thunderbirdarena.ubc.ca
treasury.universitycounsel.ubc.ca
ubccpd.ca
it.ubc.ca
ubcproperties.universitycounsel.ubc.ca
uilo.ubc.ca
utown.ubc.ca
vancouversummerprogram.ubc.ca
vantagecollege.ubc.ca
vpstudents.ubc.ca
waterequity.pwias.ubc.ca
webforms.sauder.ubc.ca
webforms.students.ubc.ca
webservices.it.ubc.ca
wellbeing.ubc.ca
www.bc.net
www.rise.ubc.ca

UBC Hospital Caller’s Menus Maintenance – April 05, 2018 17:00 – 20:00 PT

March 29, 2018 - 4:23pm

Due to a network change and hardware move, four hospital caller’s menus will be temporarily unavailable during this change. The voice pathway will be routed to voicemail during this change window since the voice pathway will not be available during the change window.

EduCloud Server Service Maintenance April 7, 2018 06:00 – 11:00 PT

March 29, 2018 - 4:21pm

Scheduled maintenance on the EduCloud Server environment (https://bcnet.educloud.ubc.ca) will be performed during the above time.

Virtual machines running on the EduCloud Server service will remain up and running. Administrators will be able to manage virtual machines via other management methods such as RDP and SSH, but will not be able to login to the EduCloud administration portal.

AccessUBC Upgrade Apr 6, 2018 17:00 – Apr 8 23:59:59 PT

March 29, 2018 - 4:20pm

AccessUBC will be upgraded Apr 6, 2018 17:00 – Apr 8 23:59:59 PT. The sponsor guest and AccessUBC will not be available during this time. All the scheduled jobs will be stopped.

UBC Robson Square Phone Service Maintenance April 09, 2018 00:00 – 06:00 PT

March 29, 2018 - 4:19pm

The UBC Robson Square phone service will be undergoing maintenance for up to 30 minutes on April 9th between 00:00 and 06:00 PT. No impact is anticipated as a result of this change.

EduCloud Server Maintenance March 28, 2018 07:00 – April 6, 2018 17:00 PT

March 29, 2018 - 8:00am

EduCloud Server infrastructure will be undergoing maintenance in the above mentioned period. No service impact is expected.

Drupal 7 and 8 Patches are now available – March 28, 2018 1:15pm

March 28, 2018 - 1:35pm

As posted in a previous bulletin (http://bulletins.it.ubc.ca/archives/32267), Drupal has released security updates of 7.x, 8.3.x, 8.4.x, and 8.5.x to fix a highly critical security vulnerability.

If you are the owner or administrator of a Drupal website, please take some time to implement the core updates now. If you cannot patch your site, please take it offline immediately.

Drupal 8 – Upgrade to v8.5.1
• If you are unable to update immediately, you can attempt to apply the Drupal code available here: https://cgit.drupalcode.org/drupal/rawdiff/?h=8.5.x&id=5ac8738fa69df34a0635f0907d661b509ff9a28f to fix the vulnerability until you are able to completely update.

Drupal 7 – Upgrade to v7.5.8
• If you are unable to update immediately, you can attempt to apply the Drupal code available here: https://cgit.drupalcode.org/drupal/rawdiff/?h=7.x&id=2266d2a83db50e2f97682d9a0fb8a18e2722cba5 to fix the vulnerability until you are able to completely update.

Drupal 6 – A community patch is available
https://www.drupal.org/project/d6lts/issues/2955130

Please note that this upgrade has been implemented by UBC IT for sites hosted by UBC IT Web Services.

If you have any questions, or require any assistance to patch or secure your sites, please email security@ubc.ca.

EduCloud Server Service Maintenance – March 28, 2018 18:00 – 23:59 PT

March 28, 2018 - 8:00am

We will be performing scheduled maintenance on the EduCloud Server environment for Organizations hosted in UBC Okanagan during the above maintenance window. Virtual machines running on the EduCloud Server service will remain up and running. Administrators will be able to manage virtual machines via normal management methods like RDP and SSH, but will not be able to login to the EduCloud administration portal.

Upcoming Drupal 7 and 8 Patches Address Highly Critical Security Vulnerability – March 28th, 2018 10:00am

March 28, 2018 - 8:00am

Drupal has announced that they will be releasing security updates of Drupal 7.x, 8.3.x, 8.4.x, and 8.5.x on March 28, 2018 between 10:00am – 11:30am PST that will fix a highly critical security vulnerability.

If you are the owner or administrator of a Drupal website, the Drupal Security Team urges you to reserve time for core updates during this time. Exploits may be developed within hours or days.

Security release announcements will appear on the Drupal.org security advisory page.

Security Risk: Critical

Action:

  1. As soon as the patches are released on March 28, 2018, update your installation of Drupal to the patched version.
  2. Depending on the nature of the vulnerability, if you are running a version that cannot be patched, you may need to consider taking your site offline until the vulnerability can be remediated.

Drupal websites hosted by UBCIT Web Services

If your Drupal website is hosted by UBC IT Web Services, this patch will be assessed and addressed once it is available.

Drupal websites hosted on UBCIT Shared Web Hosting

If your Drupal website is hosted on UBC IT Shared Web Hosting, you are responsible for patching your Drupal install.  If you require assistance, please contact security@ubc.ca.

If you have a Drupal 6 website

Those managing Drupal 6 sites are recommended to back their site up immediately, and be prepared to take their site offline tomorrow depending on how critical the announced vulnerability is.  If this is not feasible for business purposes, please email security@ubc.ca to discuss mitigation strategies immediately.

  • take a full backup of your site and DB in its current state so you have a known good copy to revert to
  • if your site doesn’t need to be internet accessible, lock it down to an on-campus IP address range via .htaccess or firewall
  • if your site doesn’t need to be publically accessible, use a .htaccess htpasswd at the root of your site, and circulate that password to your user community while you work on a proper solution
  • if your site doesn’t need to be fully dynamic, export all of your pages as static code, make that your public site, and move your actual Drupal instance to a non-public IP space, or htaccess password protected URL.  See hxxps://www.drupal.org/node/27882 for more information

 

Websites not hosted by UBC IT Web Services or Shared Web Hosting

If you manage your own Drupal instance, please send an email to security@ubc.ca and indicate your action plan as one of the following:

  • You or your staff are patching
  • You are engaging with a third party to patch
  • You require our assistance with patching
  • The instance cannot be patched for technical reasons
  • The instance is no longer used, and can be permanently removed

In addition, please indicate:

  • Technical contact for the instance, if it is not you
  • Business impact if the instance were to be taken down [Low/Medium/High]
  • What an acceptable downtime would be
  • The best way to contact you for follow-up

Additional Information

https://www.drupal.org/psa-2018-001

If you have any questions, please contact security@ubc.ca

ToolVox Server and EMS Desktop client Upgrade March 28, 2018 8:00 – 9:00 PT

March 28, 2018 - 8:00am

ToolVox Server and the EMS Desktop client on Campus Security ComOps workstation will be unavailable during the upgrade.

EduCloud Server Service Maintenance March 24, 2018 06:00 – 11:00 PT

March 25, 2018 - 7:45am

Scheduled maintenance on the EduCloud Server environment (https://bcnet.educloud.ubc.ca) will be performed during the above times.

Virtual machines running on the EduCloud Server service will remain up and running. Administrators will be able to manage virtual machines via other management methods such as RDP and SSH, but will not be able to login to the EduCloud administration portal.

iPeer Scheduled Update Mar 24, 2018 00:00-00:15 PT

March 23, 2018 - 8:00am

iPeer will be unavailable for a scheduled update from 00:00-00:15 PT on Saturday Mar 24, 2018.

PCI Infrastructure Maintenance March 13 08:00 – March 23 16:00 PT

March 22, 2018 - 8:00am

Maintenance on the PCI Infrastructure will be performed during the weeks of March 11 and 16th.

No service impact is expected.

Resolved: VDI – sessions freezing for users – March 21st, 2018 18:39

March 21, 2018 - 6:41pm

The issue regarding VDI sessions freezing for multiple users has been resolved as of March 21st at 16:05 PT.

Update: VDI – sessions freezing for users in multiple buildings – March 21st, 2018 18:21

March 21, 2018 - 6:24pm

We’ve had multiple reports that users in having their VDI sessions freeze up and are unable to log back in.  UBC IT staff are continuing to investigate this issue and what buildings are affected by this. We will provide another update at 19:21PT.

Update: VDI – sessions freezing up for users in TEF 3 and Donald Rix – March 21st, 2018 17:00

March 21, 2018 - 5:02pm

We’ve had multiple reports that users in TEF 3 and Donald Rix are having their VDI sessions freeze up and are unable to log back in. UBC IT staff are continuing to investigate this issue. We will provide another update at 18:00 PT.

VDI – sessions freezing up for users in TEF 3 and Donald Rix – March 21st, 2018 15:00

March 21, 2018 - 3:06pm

We’ve had multiple reports that users in TEF 3 and Donald Rix are having their VDI sessions freeze up and are unable to log back in. Our Systems team is investigating.