Canadians can file online tax returns again after emergency outage

Tax office tight-lipped about what it's just patched

Dudley Do-Right Royal Canadian Mounted Police

Canada's taxman has restored online services it took down over the weekend to respond to unspecified vulnerabilities.

The Canada Revenue Agency (CRA) announced the end of its partial outage at 5:00PM Sunday, Eastern Daylight Time.

The agency doesn't stipulate the vulnerability it identified, merely saying it affected “websites worldwide”, prompting it to “temporarily take down our online services, including electronic filing” while it applied patches.

“We took this action as a precaution, not as the result of a successful hack or breach,” the statement says.

The CRA's servers are on Shared Services Canada IP addresses, and according to Netcraft were running Apache 2.2.31 on *nix when last scanned on March 7, behind an F5 Big-IP for protection.

In January, Apache shipped 2.2.32 in the legacy branch, a security and bug fix release. Canadians probably hope it was the web server, rather than a more critical personal-data-gathering application a tier or two down the agency's stack. ?


Biting the hand that feeds IT ? 1998–2017

  • 8207870 2018-01-20
  • 59213869 2018-01-20
  • 814434868 2018-01-20
  • 663393867 2018-01-20
  • 255500866 2018-01-20
  • 736756865 2018-01-20
  • 57893864 2018-01-20
  • 378982863 2018-01-20
  • 463182862 2018-01-20
  • 983878861 2018-01-20
  • 226305860 2018-01-20
  • 194376859 2018-01-20
  • 17410858 2018-01-20
  • 148249857 2018-01-20
  • 619862856 2018-01-20
  • 715860855 2018-01-20
  • 99290854 2018-01-20
  • 508353853 2018-01-19
  • 966152852 2018-01-19
  • 997753851 2018-01-19