Bug 1000377

Summary:	Download manager allows me to upload csv with wrong metadata.
Product:	[Retired] Red Hat Network	Reporter:	Tomas Kopecek <tkopecek>
Component:	RHN/Content Tools	Assignee:	Richard Bernleithner <rbernlei>
Status:	CLOSED EOL	QA Contact:
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	_unset	CC:	bsaylor
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-07-05 15:16:58 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:
Bug Blocks:	578256

Description Tomas Kopecek 2013-08-23 10:27:28 UTC

I can upload csv containing wrong filesize and checksum. Such file is than registered and displayed to customers. It should raise an error, that metadata and file are different and it shouldn't allow to upload such file.

Example can be seen on prod https://rhn.redhat.com/rhn/software/channel/downloads/Download.do?cid=12023 where installer and its signature have same size/checksum. Note that these can't be changed later from client-side, as when I try to upload fixed csv, I got:

Error Message:
    File was modified: rhn/isos/MRG-2.3/rhemrg-nonlinux-grid-2/condor-7.8.8-0.4.1.msi.asc
Error Class Code: 50
Error Class Info: Invalid information uploaded to the server

which is ok, but should be catched in first upload.

Comment 2 Thomas "Shea" DeAntonio 2017-07-05 15:16:58 UTC

As you may already be aware, Red Hat is transitioning from the Red Hat Network (RHN) hosted interface to the Red Hat Subscription Management (RHSM) interface in July 2017. Red Hat has invested in and seen success from RHN for many years, and used that experience to build more robust technologies like RHSM. 
 
If you have not yet migrated your RHN systems to RHSM or you are a Red Hat Satellite customer, please review the information from. https://access.redhat.com/products/red-hat-subscription-management#migration. 
 
Since we are shutting down RHN, no further actions will be taken with this bug or enhancement request.  You can find additional information at RHSM product page (https://access.redhat.com/products/red-hat-subscription-management).  If you have further questions, please contact support (https://access.redhat.com/products/red-hat-subscription-management#support).