Drag and drop upload in browser window fails after patching Ubuntu Server 18.04 LTS

Steps to reproduce

Update latest patch batch from Ubuntu
Reboot
Drag and drop a file in any browser to upload

Expected behaviour

File transfers as expected

Actual behaviour

The file doesn't upload. No errors reported in NC logs or on workstation logs.

If you use the + in the NC interface, uploads work. Only drag and drop seems to be impacted.

Server configuration

Several server instances are impacted. All Ubuntu, though. The impacted instances were rolled back to the previous snapshot.

Critical security patches don't cause the issue.

I haven't had time to apply groups of patches at a time to find what breaks. We are in a heavy production period for the next several weeks and downtime will be difficult. Here is the ugly list of updates that are waiting to be applied. Something in this list causes the problem:

awstats - powerful and featureful web server log analyzer acpica-tools - ACPICA tools for the development and debug of ACPI tables apt-xapian-index - maintenance and search tools for a Xapian index of Debian packages astropy-utils - Command line tools from astropy cgvg - command-line source browsing tool convmv - filename encoding conversion tool cookietool - suite of programs to help maintain a fortune database cron-deja-vu - filter for recurring cron mails ddgr - DuckDuckGo from the terminal develock-el - additional font-lock keywords for the developers on Emacs digikam - digital photo management application for KDE eclipse-cdt-qt - Qt framework support for Eclipse CDT elpa-find-file-in-project - quick access to project files in Emacs elpa-hl-todo - highlight TODO and similar keywords in comments and strings embassy-domsearch - Extra EMBOSS commands to search for protein domains filepp - generic perl-based file pre-processor for text files fteproxy - programmable proxy for censorship circumvention fuzzyocr - spamassassin plugin to check image attachments gdl-mpfit - Robust non-linear least squares curve fitting for GDL geany-plugin-doc - documentation plugin for Geany googler - Power tool to Google (Web & News) and Google Site Search from the terminal htdig - web search and indexing system - binaries iraf-wcstools - Handle the WCS of a FITS image (IRAF package) irssi-scripts - collection of scripts for irssi kbibtex - BibTeX editor for KDE kbibtex-data - BibTeX editor for KDE -- common data kde-zeroconf - zeroconf plugins and kio slaves for KDE kphotoalbum - tool for indexing, searching and viewing images by keywords for KDE lhs2tex - Generates LaTeX code from literate Haskell sources libautobox-core-perl - module providing automatic methods for core functions libautobox-junctions-perl - module providing autoboxified junction-style operators libb-keywords-perl - lists of internal perl keywords libboost-context-dev - provides a sort of cooperative multitasking on a single thread (default version) libboost-context1.62-dev - provides a sort of cooperative multitasking on a single thread libboost-context1.62.0 - provides a sort of cooperative multitasking on a single thread libboost-context1.65-dev - provides a sort of cooperative multitasking on a single thread libboost-context1.65.1 - provides a sort of cooperative multitasking on a single thread libccp4-data - CCP4 core functionality - common files libccp4-dev - CCP4 core functionality - development files libccp4c0 - CCP4 core functionality - C runtime libccp4c0-dbg - CCP4 core functionality - debug symbols libccp4f0 - CCP4 core functionality - fortran runtime libccp4f0-dbg - CCP4 core functionality - debug symbols libcpl-dev - ESO library for automated astronomical data-reduction libdancer-plugin-database-perl - Dancer plugin providing easy database connections libdancer2-plugin-ajax-perl - Dancer2 plugin for adding Ajax route handlers libdancer2-plugin-database-perl - module for easy database connections for Dancer2 applications libdata-table-perl - module to manipulate data tables in perl (as in R) libdevel-callparser-perl - custom parsing attached to subroutines libdevel-declare-perl - module to add new syntax to Perl libexception-class-trycatch-perl - syntactic try/catch sugar for use with Exception::Class libexporter-renaming-perl - facility to rename symbols when imported libfunction-parameters-perl - module for subroutine definitions with parameter lists libfuture-asyncawait-perl - deferred subroutine syntax for futures libghc-sql-words-dev - SQL keywords data constructor into OverloadedString libghc-sql-words-doc - SQL keywords data constructor into OverloadedString; documentation libghc-sql-words-prof - SQL keywords data constructor into OverloadedString; profiling libraries libgpp4-0 - runtime library for CCP4 compatible programs libgpp4-dev - development environment for CCP4 compatible programs libgpp4-doc - doxygen generated documentation for libgpp4 libgpp4f-0 - shared library for CCP4 compatible programs libgpp4f-dev - development environment for CCP4 compatible programs libguard-perl - Perl module providing safe cleanup using guard objects libjs-emojify - JavaScript library converting Emoji keywords to images libkavorka-perl - function signatures with the lure of the animal libkeyword-simple-perl - Perl module to define new keywords in pure Perl liblexical-failure-perl - Perl module for user-selectable lexically-scoped failure signaling liblexical-underscore-perl - access your caller's lexical underscore liblingua-stopwords-perl - Stop words for several languages libmethod-signatures-perl - method and function declarations with signatures and no source filter libmicroba-java - set of JFC (Swing) components libmicroba-java-doc - Documentation for libmicroba-java libmoosex-declare-perl - Moose extension providing a declarative syntax libmoosex-method-signatures-perl - Moose extension for method declarations with type constraints libmoosex-poe-perl - Moose wrapper around a POE::Session libmoosex-role-parameterized-perl - Moose extension providing parameterized roles libmoox-struct-perl - simple lightweight record-like structures making sounds like cows libparse-keyword-perl - write syntax extensions in perl (with only limited use) libperl-prereqscanner-perl - module for extracting prerequisites from Perl code libperl6-form-perl - Perl 5 implementation of the Perl 6 'form' built-in libperldoc-search-perl - Index and Search local Perl Documentation libperlx-assert-perl - yet another assertion keyword libqfits0 - Library offering easy access to FITS files librudecgi-dev - C++ parser library for CGI applications - development libraries librudecgi5v5 - C++ parser library for CGI applications - runtime librunning-commentary-perl - Perl module to call system() with tracking messages libscalar-list-utils-perl - modules providing common scalar and list utility subroutines libstruct-dumb-perl - module to create simple lightweight record-like structures libsub-wrappackages-perl - module to wrap subroutines in packages libsyntax-keyword-gather-perl - syntax extension for the "gather" keyword libsyntax-keyword-junction-perl - Perl6 style Junction operators in Perl5 libsyntax-keyword-try-perl - try/catch/finally syntax for perl libsyntax-perl - pragma for activating syntax extensions libtext-context-eitherside-perl - Perl module to get context around a keyword libverilog-perl - framework providing Verilog support libwcstools-dev - Handle the WCS of a FITS image (development files) libwcstools1 - Handle the WCS of a FITS image (shared library) mailavenger - Highly configurable, MTA-independent SMTP filter server mew - mail reader supporting PGP/MIME for Emacs mew-beta - mail reader supporting PGP/MIME for Emacs (development version) minitube - Native YouTube client missfits - Basic maintenance and packaging tasks on FITS files nama - Ecasound-based multitrack recorder/mixer neopi - web shell code detection node-ajv-keywords - Custom JSON-Schema keywords for Ajv validator node-color-convert - Plain color conversion functions nowhere - Translates programs from an extended Standard ML to Standard ML pdfmod - simple tool for modifying PDF documents pdfmod-dbg - simple tool for modifying PDF documents -- debugging symbols perlindex - Perl manual pages index and query application ptex2tex - easy generation of (possibly complex) LaTeX environments pypy-pytest - Simple, powerful testing in PyPy python-acora - fast multi-keyword text search engine (Python 2) python-bottle-sqlite - SQLite3 integration for Bottle - Python 2.X python-django-classy-tags - Class based template tags for Django projects python-django-classy-tags-doc - Class based template tags for Django projects (Documentation) python-frozendict - immutable dictionary - Python 2.7 python-fte - encryption library to thwart deep packet inspection censorship python-jsonrpclib - implementation of the JSON-RPC v2.0 specification python-paypal - PayPal API implementation (Python 2) python-pykickstart - Python library for manipulating kickstart files python-pytest - Simple, powerful testing in Python python-pytest-doc - Simple, powerful testing in Python - Documentation python-tornadorpc - library for XML/JSON RPC using the Tornado framework python-ucltip - Python module to help making command line tool Python binding faster python-zhpy - the Python language with Chinese python-zope.index - Indices for using with catalog like text, field, etc. python3-acora - fast multi-keyword text search engine (Python 3) python3-bottle-sqlite - SQLite3 integration for Bottle - Python 3.x python3-django-classy-tags - Class based template tags for Django projects (Python3 version) python3-frozendict - immutable dictionary - Python 3.x python3-jsonrpclib-pelix - Implementation of the JSON-RPC v2.0 specification (Python 3) python3-pafy - Download videos and retrieve metadata from YouTube python3-paypal - PayPal API implementation (Python 3) python3-pykcs11 - PKCS#11 wrapper for Python python3-pytest - Simple, powerful testing in Python3 python3-wither - XML/HTML Generation DSL (Python 3) ruby-acts-as-taggable-on - provides advanced tagging for Rails ruby-forwardable-extended - Forwardable with hash and instance variable extensions ruby-numru-misc - Miscellaneous functions and classes to help Ruby programming search-ccsb - BibTeX search tool search-citeseer - BibTeX search tool texlive-latex-extra - TeX Live: LaTeX additional packages texlive-science - TeX Live: Mathematics, natural sciences, computer science packages vim-syntax-gtk - Syntax files to highlight GTK+ keywords in vim wcstools - Handle the WCS of a FITS image xul-ext-form-history-control - extension to manage form history yokadi - commandline todo system kcemu - KC 85/4 emulator kcemu-common - KC 85/4 emulator - common files vice - Versatile Commodore Emulator

Operating system Ubuntu 18.04.2 LTS

Web server: Apache2

Database: MySQL

PHP version: 7.2

Nextcloud version: (see Nextcloud admin page)

15.0.4 and 15.0.5

Updated from an older Nextcloud/ownCloud or fresh install: Last major update was from 14.0.6 to 15.0.4 and also 15.0.5.

Where did you install Nextcloud from: updater.phar

Signing status:

Signing status

``` Login as admin user into your Nextcloud and access http://example.com/index.php/settings/integrity/failed paste the results here. ```

List of activated apps:

App list

Enabled: - accessibility: 1.1.0 - activity: 2.8.2 - admin_audit: 1.5.0 - audioplayer: 2.6.0 - bruteforcesettings: 1.3.0 - cloud_federation_api: 0.1.0 - comments: 1.5.0 - dav: 1.8.1 - federatedfilesharing: 1.5.0 - federation: 1.5.0 - files: 1.10.0 - files_pdfviewer: 1.4.0 - files_rightclick: 0.11.0 - files_sharing: 1.7.0 - files_texteditor: 2.7.0 - files_trashbin: 1.5.0 - files_versions: 1.8.0 - files_videoplayer: 1.4.0 - firstrunwizard: 2.4.0 - gallery: 18.2.0 - groupfolders: 2.0.3 - impersonate: 1.2.0 - logreader: 2.0.0 - lookup_server_connector: 1.3.0 - nextcloud_announcements: 1.4.0 - notifications: 2.3.0 - oauth2: 1.3.0 - onlyoffice: 2.1.2 - password_policy: 1.5.0 - provisioning_api: 1.5.0 - serverinfo: 1.5.0 - sharebymail: 1.5.0 - support: 1.0.0 - survey_client: 1.3.0 - systemtags: 1.5.0 - theming: 1.6.0 - twofactor_backupcodes: 1.4.1 - updatenotification: 1.5.0 - workflowengine: 1.5.0 Disabled: - announcementcenter - encryption - files_external - files_retention - user_ldap ``` If you have access to your command line run e.g.: sudo -u www-data php occ app:list from within your Nextcloud installation folder ```

Nextcloud configuration:

Config report

{ "system": { "instanceid": "***REMOVED SENSITIVE VALUE***", "passwordsalt": "***REMOVED SENSITIVE VALUE***", "secret": "***REMOVED SENSITIVE VALUE***", "trusted_domains": [ "REMOVED", "REMOVED" ], "datadirectory": "***REMOVED SENSITIVE VALUE***", "overwrite.cli.url": "http:\/\/nc.mjp.com", "dbtype": "mysql", "version": "15.0.4.0", "dbname": "***REMOVED SENSITIVE VALUE***", "dbhost": "***REMOVED SENSITIVE VALUE***", "dbport": "", "dbtableprefix": "oc_", "dbuser": "***REMOVED SENSITIVE VALUE***", "dbpassword": "***REMOVED SENSITIVE VALUE***", "logtimezone": "UTC", "installed": true, "memcache.local": "\\OC\\Memcache\\Redis", "memcache.locking": "\\OC\\Memcache\\Redis", "redis": { "host": "***REMOVED SENSITIVE VALUE***", "port": 6379 }, "mail_smtpmode": "smtp", "mail_from_address": "***REMOVED SENSITIVE VALUE***", "mail_domain": "***REMOVED SENSITIVE VALUE***", "mail_smtphost": "***REMOVED SENSITIVE VALUE***", "maintenance": false, "theme": "", "loglevel": 2, "log_rotate_size": 52428800, "onlyoffice": { "jwt_secret": "REMOVED", "jwt_header": "REMOVED" }, "updater.release.channel": "production" } } ``` If you have access to your command line run e.g.: sudo -u www-data php occ config:list system from within your Nextcloud installation folder or Insert your config.php content here. Make sure to remove all sensitive content such as passwords. (e.g. database password, passwordsalt, secret, smtp password, …) ```

Are you using external storage, if yes which one: local/smb/sftp/... No Are you using encryption: yes/no

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/...

LDAP configuration (delete this part if not used)

LDAP config

``` With access to your command line run e.g.: sudo -u www-data php occ ldap:show-config from within your Nextcloud installation folder Without access to your command line download the data/owncloud.db to your local computer or access your SQL server remotely and run the select query: SELECT * FROM `oc_appconfig` WHERE `appid` = 'user_ldap'; Eventually replace sensitive data as the name/IP-address of your LDAP server or groups. ```

Client configuration

Browser:

Firefox 65.0.2 Chrome 72.0.3626.121

Operating system: Win10

Logs

Web server error log

``` Insert your webserver log here ```

Nextcloud log (data/nextcloud.log)

Nextcloud log

``` Insert your Nextcloud log here ```

Browser log

``` Insert your browser log here, this could for example include: a) The javascript console log b) The network log c) ... ```

nextcloud / server