Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Arjan H. 221 posts 457 karma points c-trib
    Feb 10, 2015 @ 10:58
    Arjan H.
    0

    Errors after applying ClientDependency security patch on 7.1.6

    I immediately updated all our Umbraco sites after receiving the following security bulletin: http://umbraco.com/39310. The patch worked fine on all 4.5.2 - 6.2.4 installations, but we were seeing a sh*tload of errors (see below) in the Umbraco log of a 7.1.6 installation hosted on Azure. And according to the client published changes were randomly rolled back by Umbraco. So we were forced to undo the security patch. Help would be much appreciated.

    All these nodes were in fact published (and visible on the website), so I have no idea where the following errors were coming from:

    2015-02-07 04:44:17,248 [7] WARN  Umbraco.Web.Routing.DefaultUrlProvider - [Thread 11] Couldn't find any page with nodeId=10019. This is most likely caused by the page not being published.
    2015-02-07 04:44:17,248 [7] WARN  Umbraco.Web.Routing.DefaultUrlProvider - [Thread 11] Couldn't find any page with nodeId=9996. This is most likely caused by the page not being published.
    2015-02-07 04:44:17,248 [7] WARN  Umbraco.Web.Routing.DefaultUrlProvider - [Thread 11] Couldn't find any page with nodeId=9997. This is most likely caused by the page not being published.
    2015-02-07 04:44:17,248 [7] WARN  Umbraco.Web.Routing.DefaultUrlProvider - [Thread 11] Couldn't find any page with nodeId=9994. This is most likely caused by the page not being published.
    2015-02-07 04:44:17,248 [7] WARN  Umbraco.Web.Routing.DefaultUrlProvider - [Thread 11] Couldn't find any page with nodeId=6694. This is most likely caused by the page not being published.
    

    We were also seeing a lot of scheduled task related errors:

    2015-02-08 21:41:21,200 [8] ERROR Umbraco.Web.Scheduling.ScheduledPublishing - [Thread 24] An error occurred with the scheduled publishing
    System.Net.WebException: The remote server returned an error: (400) Bad Request.
       at System.Net.WebClient.UploadDataInternal(Uri address, String method, Byte[] data, WebRequest& request)
       at System.Net.WebClient.UploadString(Uri address, String method, String data)
       at System.Net.WebClient.UploadString(String address, String data)
       at Umbraco.Web.Scheduling.ScheduledPublishing.Start(ApplicationContext appContext)
    

    And:

    2015-02-09 20:22:57,791 [9] ERROR Umbraco.Web.Scheduling.ScheduledPublishing - [Thread 22] An error occurred with the scheduled publishing
    System.Net.WebException: The remote server returned an error: (404) Not Found.
       at System.Net.WebClient.UploadDataInternal(Uri address, String method, Byte[] data, WebRequest& request)
       at System.Net.WebClient.UploadString(Uri address, String method, String data)
       at System.Net.WebClient.UploadString(String address, String data)
       at Umbraco.Web.Scheduling.ScheduledPublishing.Start(ApplicationContext appContext)
    

    And finally these errors:

    2015-02-05 14:29:19,564 [7] ERROR Umbraco.Web.Mvc.AdminTokenAuthorizeAttribute - [Thread 9] Failed to format passed in token value
    System.Security.Cryptography.CryptographicException: Error occurred during a cryptographic operation.
       at System.Web.Security.Cryptography.HomogenizingCryptoServiceWrapper.HomogenizeErrors(Func`2 func, Byte[] input)
       at System.Web.Security.Cryptography.HomogenizingCryptoServiceWrapper.Unprotect(Byte[] protectedData)
       at System.Web.Security.FormsAuthentication.Decrypt(String encryptedTicket)
       at Umbraco.Core.StringExtensions.DecryptWithMachineKey(String value)
       at Umbraco.Web.Mvc.AdminTokenAuthorizeAttribute.AuthorizeCore(HttpContextBase httpContext)
    
  • Arjan H. 221 posts 457 karma points c-trib
    Feb 13, 2015 @ 11:10
    Arjan H.
    0

    Has anyone else encountered this issue on Umbraco 7.1.6, or am I the only one?

  • marcelh 171 posts 471 karma points
    Dec 09, 2015 @ 20:31
    marcelh
    0

    Same here, the CryptographicException started appearing for me in version 7.2.8 and are still there for me in 7.3.3 Did you manage to find a solution?

  • Arjan H. 221 posts 457 karma points c-trib
    Dec 10, 2015 @ 09:39
    Arjan H.
    0

    Nope. Although I haven't tried upgrading to the latest version of Umbraco yet.

Please Sign in or register to post replies

Write your reply to:

Draft