Bug 959590 - System Currency Report not showing severity levels for security advisories
Summary: System Currency Report not showing severity levels for security advisories
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Spacewalk
Classification: Community
Component: WebUI
Version: 1.9
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Tomas Lestach
QA Contact: Red Hat Satellite QA List
URL:
Whiteboard:
Depends On:
Blocks: space20
TreeView+ depends on / blocked
 
Reported: 2013-05-03 21:57 UTC by daniel.schindler
Modified: 2013-08-02 13:15 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-08-02 13:15:42 UTC
Embargoed:


Attachments (Terms of Use)
System Currency Report not showing security errata (32.79 KB, image/png)
2013-05-03 21:57 UTC, daniel.schindler
no flags Details
Errata view showing security errata (57.97 KB, image/png)
2013-05-03 21:58 UTC, daniel.schindler
no flags Details
Oracle Linux latest updateinfo.xml with severity tags (3.25 MB, text/xml)
2013-05-03 22:00 UTC, daniel.schindler
no flags Details

Description daniel.schindler 2013-05-03 21:57:43 UTC
Created attachment 743385 [details]
System Currency Report not showing security errata

Description of problem:
System Currency Report doesn't show security advisory errata although security errata is visible in rhn/errata/AllErrata.do. I see that severity tags for security errata in updateinfo.xml are set but I don't know if, how or where this tag is used...
I would have suspected /usr/lib/python2.6/site-packages/spacewalk/satellite_tools/reposync.py to be responsible for importing severity levels but I don't see any hint in the script.

Version-Release number of selected component (if applicable):
Spacewalk 1.9 release

How reproducible:
always

Steps to Reproduce:
1. open rhn/systems/SystemCurrency.do and see that no security errata is displayed (see attachment)
2. see that security errata is displayed under rhn/errata/AllErrata.do (see attachement)
  
Actual results:
No security errata is displayed in any level of severity at SystemCurrency.do.

Expected results:
Display all different severity level of security errata at SystemCurrency.do.

Additional info:
I'm using Spacewalk 1.9 under Oracle Linux 6.4 and have imported "Oracle Linux 6 x86_64 latest"-channel from public-yum.oracle.com. Oracle has updated there metadata for updateinfo.xml to make it compatible with Spacewalk (https://blogs.oracle.com/linux/entry/updates_to_errata_on_uln) and everything seems to be working fine except for SystemCurrency.do

Comment 1 daniel.schindler 2013-05-03 21:58:49 UTC
Created attachment 743386 [details]
Errata view showing security errata

Comment 2 daniel.schindler 2013-05-03 22:00:38 UTC
Created attachment 743387 [details]
Oracle Linux latest updateinfo.xml with severity tags

Comment 3 Tomas Lestach 2013-05-10 15:35:25 UTC
Right, reposync imports the advisories in a different way than we're used to.

Prepending severity to the synopsis for security advisories ...


spacewalk.git: a06e70b8d48b4c2b2269f88d4168166bdd8b2525

Comment 4 daniel.schindler 2013-05-11 07:12:42 UTC
Thanks Thomas :D

A very smooth solution! This way the guys from Oracle ULN won't need to adjust the synopsis tag in their metadata.

Regards,
Daniel

Comment 5 Tomas Lestach 2013-05-13 07:44:34 UTC
Hey Daniel,

let's call this a quick fix.
The real fix would be to start using severity_id column in the rhnErrata table.

Comment 6 daniel.schindler 2013-05-13 07:57:43 UTC
Any plans to do so in a future release? :)

Comment 7 daniel.schindler 2013-06-20 07:36:31 UTC
Hi Tomas,

after applying the patch I receive this error for several repositories:

Sync started: Thu Jun 20 09:21:51 2013
['/usr/bin/spacewalk-repo-sync', '--channel', 'ol6_u4_base-x86_64', '--type', 'yum']
Repo URL: http://public-yum.oracle.com/repo/OracleLinux/OL6/4/base/x86_64
Packages in repo:              8396
No new packages to sync.
Repo http://public-yum.oracle.com/repo/OracleLinux/OL6/4/base/x86_64 has comps file comps.xml.
Repo http://public-yum.oracle.com/repo/OracleLinux/OL6/4/base/x86_64 has 938 errata.
ERROR: unsupported operand type(s) for +: 'NoneType' and 'str'
Sync completed.
Total time: 0:04:22

If I comment out the added lines it finishes without such error.

--daniel

Comment 8 Tomas Lestach 2013-06-25 08:33:57 UTC
Correct,  severity may be unknown, an additional commit is required ...

spacewalk.git: 1e6218c04e64d49152dd086165e13a7233a78008

Comment 9 Tomáš Kašpárek 2013-08-02 13:15:42 UTC
Fix for this bug is present in Spacewalk 2.0, closing this bug as CURRENTRELEASE.


Note You need to log in before you can comment on or make changes to this bug.