News: Integrity issue with news 12.0.3

[blizzz]

Technical information
=====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results
=======
- news
    - FILE_MISSING
        - vendor/ezyang/htmlpurifier/maintenance/.htaccess

Raw output
==========
Array
(
    [news] => Array
        (
            [FILE_MISSING] => Array
                (
                    [vendor/ezyang/htmlpurifier/maintenance/.htaccess] => Array
                        (
                            [expected] => 4d51270ac56b1600199cd52c4f0fc34171bb306db59761863c87978049b771a053ebb80c8dda03b4d98bf5e43361ec0e1e1d2ad4b01fc315fb809b40acd23843
                            [current] => 
                        )

                )

        )

)

@MorrisJobke

[MorrisJobke]

:/ Another one that is most likely due to the copy script not handling well :/

[BernhardPosselt]

News never shipped a json file for the integrity stuff afaik

[MorrisJobke]

It does now ;) But the file is there for me in the archive :/

[MorrisJobke]

Also the file from https://github.com/nextcloud/news/releases/tag/12.0.3 has the .htaccess in it 😕

[nRaecheR]

Same issue here, using official Docker image with Apps volume mapped on host. The needed file isn't there:

admin@server:/etc/nextcloud/apps/news/vendor/ezyang/htmlpurifier/maintenance$ ls -al
total 260
drwxr-xr-x 2 www-data www-data   4096 Jun  4 14:02 .
drwxr-xr-x 7 www-data www-data   4096 Jun  4 14:02 ..
-rw-r--r-- 1 www-data www-data   3759 Jun  4 14:02 add-vimline.php
-rw-r--r-- 1 www-data www-data    631 Jun  4 14:02 common.php
-rw-r--r-- 1 www-data www-data    220 Jun  4 14:02 compile-doxygen.sh
-rw-r--r-- 1 www-data www-data   4791 Jun  4 14:02 config-scanner.php
-rw-r--r-- 1 www-data www-data   1079 Jun  4 14:02 flush-definition-cache.php
-rw-r--r-- 1 www-data www-data    615 Jun  4 14:02 flush.php
-rw-r--r-- 1 www-data www-data   2214 Jun  4 14:02 generate-entity-file.php
-rw-r--r-- 1 www-data www-data   5386 Jun  4 14:02 generate-includes.php
-rw-r--r-- 1 www-data www-data    749 Jun  4 14:02 generate-ph5p-patch.php
-rw-r--r-- 1 www-data www-data   1364 Jun  4 14:02 generate-schema-cache.php
-rw-r--r-- 1 www-data www-data   4366 Jun  4 14:02 generate-standalone.php
-rw-r--r-- 1 www-data www-data    170 Jun  4 14:02 merge-library.php
-rw-r--r-- 1 www-data www-data   2035 Jun  4 14:02 old-extract-schema.php
-rw-r--r-- 1 www-data www-data    748 Jun  4 14:02 old-remove-require-once.php
-rw-r--r-- 1 www-data www-data    816 Jun  4 14:02 old-remove-schema-def.php
-rw-r--r-- 1 www-data www-data   3903 Jun  4 14:02 PH5P.patch
-rw-r--r-- 1 www-data www-data 161681 Jun  4 14:02 PH5P.php
-rw-r--r-- 1 www-data www-data    186 Jun  4 14:02 regenerate-docs.sh
-rw-r--r-- 1 www-data www-data    943 Jun  4 14:02 remove-trailing-whitespace.php
-rw-r--r-- 1 www-data www-data   2175 Jun  4 14:02 rename-config.php
-rw-r--r-- 1 www-data www-data    972 Jun  4 14:02 update-config.php
admin@server:/etc/nextcloud/apps/news/vendor/ezyang/htmlpurifier/maintenance$ 

[MorrisJobke]

@BernhardPosselt @rakekniven @skjnldsv @rullzer is this also the case on your instances?

[rullzer]

yep

[rullzer]

@MorrisJobke https://github.com/nextcloud/news/releases/download/12.0.3/news.tar.gz doesn't have it

[nRaecheR]

It is there in that archive.

[rullzer]

.... ok stupid me. It is there. it was sorted weird...

[MorrisJobke]

@rullzer Did you only checked the archive or also the installed version after the update? Maybe the updater has a problem and doesn't properly extracts for file 🤔

[rullzer]

no not on my installed version.

[rullzer]

Ah can't it be. Since .htaccess is blacklisted in parts of the file handling that it just refuses to write those?

[BernhardPosselt]

Also works for me

[rakekniven]

Works for me as well. Upgraded many versions in the past.

[MorrisJobke]

Ah can't it be. Since .htaccess is blacklisted in parts of the file handling that it just refuses to write those?

maybe. I dropped the signature for now and releases a 12.0.4, which should fix the issue. Just install 12.0.4 and do the signature check again (there is a button in the error message itself).

Sorry for the mess here.

[dupgit]

Same here. Updated from 13.0.6 to 14.0.1 and got:

=======
- news
    - FILE_MISSING
        - vendor/ezyang/htmlpurifier/maintenance/.htaccess

Raw output
==========
Array
(
    [news] => Array
        (
            [FILE_MISSING] => Array
                (
                    [vendor/ezyang/htmlpurifier/maintenance/.htaccess] => Array
                        (
                            [expected] => 4d51270ac56b1600199cd52c4f0fc34171bb306db59761863c87978049b771a053ebb80c8dda03b4d98bf5e43361ec0e1e1d2ad4b01fc315fb809b40acd23843
                            [current] => 
                        )

                )

        )

)

[johanvandegriff]

Can confirm the issue. I was able to fix it by downloading https://github.com/nextcloud/news/releases/download/13.0.1/news.tar.gz, navigating to the file, and copying it to where it needed to be in Nextcloud. As a shortcut for others who encounter this in the future, the contents of the file are Deny from all, so you can do:

sudo nano .../path/to/nextcloud/apps/news/vendor/ezyang/htmlpurifier/maintenance/.htaccess

This should create a new file. Add the following:

Deny from all

Then run the rescan from Nextcloud and the error should go away.

[rfc2822]

I confirm this for NC 14.0.1 and latest news plugin. Copying the file from news.tar.gz works. Thanks @johanvandegriff

[saddy001]

Same here. https://github.com/nextcloud/news/issues/297#issuecomment-424799747 works.

[mr-gosh]

Can confirm the issue. I was able to fix it by downloading https://github.com/nextcloud/news/releases/download/13.0.1/news.tar.gz, navigating to the file, and copying it to where it needed to be in Nextcloud. As a shortcut for others who encounter this in the future, the contents of the file are Deny from all, so you can do:

sudo nano .../path/to/nextcloud/apps/news/vendor/ezyang/htmlpurifier/maintenance/.htaccess

This should create a new file. Add the following:

Deny from all

Then run the rescan from Nextcloud and the error should go away.

...and don't forget the line-break at the end, for my installation this was needed to get a propper hash...