Red Hat Bugzilla – Bug 1000377
Download manager allows me to upload csv with wrong metadata.
Last modified: 2017-07-05 11:16:58 EDT
I can upload csv containing wrong filesize and checksum. Such file is than registered and displayed to customers. It should raise an error, that metadata and file are different and it shouldn't allow to upload such file.
Example can be seen on prod https://rhn.redhat.com/rhn/software/channel/downloads/Download.do?cid=12023 where installer and its signature have same size/checksum. Note that these can't be changed later from client-side, as when I try to upload fixed csv, I got:
File was modified: rhn/isos/MRG-2.3/rhemrg-nonlinux-grid-2/condor-7.8.8-0.4.1.msi.asc
Error Class Code: 50
Error Class Info: Invalid information uploaded to the server
which is ok, but should be catched in first upload.
As you may already be aware, Red Hat is transitioning from the Red Hat Network (RHN) hosted interface to the Red Hat Subscription Management (RHSM) interface in July 2017. Red Hat has invested in and seen success from RHN for many years, and used that experience to build more robust technologies like RHSM.
If you have not yet migrated your RHN systems to RHSM or you are a Red Hat Satellite customer, please review the information from. https://access.redhat.com/products/red-hat-subscription-management#migration.
Since we are shutting down RHN, no further actions will be taken with this bug or enhancement request. You can find additional information at RHSM product page (https://access.redhat.com/products/red-hat-subscription-management). If you have further questions, please contact support (https://access.redhat.com/products/red-hat-subscription-management#support).