Bug 1000377 - Download manager allows me to upload csv with wrong metadata.
Download manager allows me to upload csv with wrong metadata.
Status: CLOSED EOL
Product: Red Hat Network
Classification: Red Hat
Component: RHN/Content Tools (Show other bugs)
_unset
Unspecified Unspecified
unspecified Severity unspecified
: ---
: ---
Assigned To: Richard Bernleithner
:
Depends On:
Blocks: 578256
  Show dependency treegraph
 
Reported: 2013-08-23 06:27 EDT by Tomas Kopecek
Modified: 2017-07-05 11:16 EDT (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2017-07-05 11:16:58 EDT
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Tomas Kopecek 2013-08-23 06:27:28 EDT
I can upload csv containing wrong filesize and checksum. Such file is than registered and displayed to customers. It should raise an error, that metadata and file are different and it shouldn't allow to upload such file.

Example can be seen on prod https://rhn.redhat.com/rhn/software/channel/downloads/Download.do?cid=12023 where installer and its signature have same size/checksum. Note that these can't be changed later from client-side, as when I try to upload fixed csv, I got:

Error Message:
    File was modified: rhn/isos/MRG-2.3/rhemrg-nonlinux-grid-2/condor-7.8.8-0.4.1.msi.asc
Error Class Code: 50
Error Class Info: Invalid information uploaded to the server

which is ok, but should be catched in first upload.
Comment 2 Thomas "Shea" DeAntonio 2017-07-05 11:16:58 EDT
As you may already be aware, Red Hat is transitioning from the Red Hat Network (RHN) hosted interface to the Red Hat Subscription Management (RHSM) interface in July 2017. Red Hat has invested in and seen success from RHN for many years, and used that experience to build more robust technologies like RHSM. 
 
If you have not yet migrated your RHN systems to RHSM or you are a Red Hat Satellite customer, please review the information from. https://access.redhat.com/products/red-hat-subscription-management#migration. 
 
Since we are shutting down RHN, no further actions will be taken with this bug or enhancement request.  You can find additional information at RHSM product page (https://access.redhat.com/products/red-hat-subscription-management).  If you have further questions, please contact support (https://access.redhat.com/products/red-hat-subscription-management#support).

Note You need to log in before you can comment on or make changes to this bug.