ELBA-2020-5829

ULN >
Oracle Linux Errata repository >
ELBA-2020-5829

ELBA-2020-5829 - spacewalk-java bug fix update

Type:	BUG
Severity:	NA
Release Date:	2020-09-02

Description

[2.7.116-1.0.6]
- Fix internal error while changing Kickstat scripts order [Orabug: 31407698]

[2.7.116-1.0.5]
- Fix setting custom info key in SSM generating ISE. [OraBug: 28774896]

[2.7.116-1.0.3]
- Fix system group errata query performance [OraBug 27643666]

[2.7.116-1.0.2]
- remove packages that rely on geronimo-specs-poms and jakarta-commons-beanutils
- remove sw2.6 jpp packages during upgrade [bug 27792543]

[2.7.116-1.0.1]
- Fix ISE on Virtual Systems page [OraBug 27704245] (Laurence Rochfort)
- Prevent deletion of last Spacewalk admin user when disabled [OraBug 27423907] (Laurence Rochfort)
- fix about string references
- fix login UI footer string [orabug 22652131]
- fix max length of channel label [bug 22509037]
- fix string resources [bug 22474947]

[2.7.116-1]
- 1493143 - keep errata in the original channel for
channel.software.mergeErrata

[2.7.115-1]
- 1458712 - 'Update Organization' button placed that way it is not clear that
it updates 'Allow Organization Admin to manage Organization Configuration'
setting as well

[2.7.114-1]
- SW 2.7 Release prep - update copyright year (3rd pass)

* Tue Aug 15 2017 Grant Gainey 2.7.113-1
- 1461898 - Fix SelectableChannel for other users of channel_selector.jspf

* Tue Aug 15 2017 Jan Dobes 2.7.112-1
- KickstartDownloadActionTest is useless

* Mon Aug 14 2017 Jan Dobes 2.7.111-1
- use LinkedHashSet same as in get method and as on web UI counterpart, TreeSet
evaluates all KickstartCommand instances as equal (because of compareTo
method)
- fixing NoCobblerTokenException: We had an error trying to login.
- this test doesn't make much sense - it lists also null-org errata and it
randomly passes/fails depending on synced content

* Fri Aug 11 2017 Jan Dobes 2.7.110-1
- assert is wrong - inverted TEST_CONFIG_BOOLEAN value is not saved when
required fields are missing in form
- fixing various ClassNotFoundException in tests - add hamcrest to classpath
- update struts libs, they are now in /usr/share/java/struts/, add only tiles
lib, others should be linked from tomcat lib dir
- ChannelFactory.listAllBaseChannels lists also null-org channels, fix test
- fix table name for set, hibernate is looking for
'rhnaction_rhnactionconfigchannel' and 'rhnaction_rhnactionconfigfilename'
tables in ConfigUploadActionTest and ConfigUploadMtimeActionTest

[2.7.109-1]
- 1471018 - Allow cancel event that was picked up from queue by WebUI

* Thu Aug 10 2017 Jan Dobes 2.7.108-1
- 'if not exists' is unsupported in PG 8.4, catch exception in Java code
instead
- TEST_CONF_LOCATION path is still used in spacewalk-java-tests RPM, use it as
fallback when any config file is not found locally

[2.7.107-1]
- another pass to update copyright year

* Thu Aug 03 2017 Jan Dobes 2.7.106-1
- 1455791 - rename cobbler profile names containing org's name

[2.7.105-1]
- 1477508 - fix query for Oracle databases

[2.7.104-1]
- bump java.apiversion
- update copyright year

* Fri Jul 28 2017 Grant Gainey 2.7.103-1
- 1475067 - Fix SSM update-status icons

[2.7.102-1]
- 1455887 - allow to fail Picked Up action as well

[2.7.101-1]
- 1461705 - enable checkboxes for systems are in SSM

* Thu Jul 20 2017 Grant Gainey 2.7.100-1
- 1461898 - fix pulldown for 'Manage Software Repositories' page * Use call
that returns correctly-sorted channel-hierarchy * Fix JSP to stop using
in ways that are bad for display * Remove HQL listCustomChannels
that doesn't do what we thought it did

[2.7.99-1]
- 1455887 - schedule.failSystemAction API overwrites system events history

[2.7.98-1]
- 1455880 - failSystemAction does not check system action id

[2.7.97-1]
- PR 476 - Fix child nav items not being shown as active

* Tue Jul 18 2017 Grant Gainey 2.7.96-1
- 1458722 - Only make org-changes, if the org is allowed to be changed

* Mon Jul 17 2017 Jan Dobes 2.7.95-1
- Merging frontend L10N from Zanata

[2.7.94-1]
- 1320469 - 'channel.software.mergePackages' does not create a repodata if a
clone channel is created using the API

[2.7.93-1]
- PR 500 - correcting email address in change log. Not able/willing to change
email addresses in individual commits, however.
- Duplicate Systems: correct language not to mention 'profiles' (bsc1035728)

* Tue Jun 27 2017 Marc Dahlhaus
- Fix logging of errors to be at error level, not debug. Also remove
milliseconds from metadata stale check to match non-debian stale check
- PR 500 - fix copy and paste mistake
- PR 500 - use the already imported and used equalsIgnoreCase
- PR 500 - Add epoch information for deb packages

[2.7.91-1]
- 1460208 - organization name allows XSS
- Revert '1460208 - organization name allows XSS'

[2.7.90-1]
- 1460960 - show 'Proxy' tab only if a system is proxy

[2.7.89-1]
- 1460208 - organization name allows XSS

* Thu Jun 22 2017 Grant Gainey 2.7.88-1
- request repodata regeneration even if an erratum without new packages is
published

[2.7.87-1]
- 1418746 - checkbox should be selected if proxy client is in a SSM

* Thu Jun 15 2017 Grant Gainey 2.7.86-1
- Increment 'earliest' date by a millisecond between chain actions

* Thu Jun 15 2017 Grant Gainey 2.7.85-1
- Add a link to action details in single errata schedule notification
- Add a link to system pending events in errata schedule notification for a
single system

* Thu Jun 15 2017 Grant Gainey 2.7.84-1
- Fix sort directions when the sort column is changed
- Allow sorting on avisory name in errata lists
- Reformat relevant-errata-list.jspf

* Wed Jun 14 2017 Grant Gainey 2.7.83-1
- Checkstyle is a harsh mistress

* Tue Jun 13 2017 Grant Gainey 2.7.82-1
- Test create assertions only in the create test, refactor helper method so
that it can be used in other tests
- Refactor: extract Tree operations tests to multiple classes, extract the
common helper method to a base class

* Tue Jun 13 2017 Grant Gainey 2.7.81-1
- extend package testing methods for more control

* Tue Jun 13 2017 Grant Gainey 2.7.80-1
- Teach NavNodeTest that not-found-l10n strings are already escaped
- Teach NavTest to rely on different pages for its test
- Fix KickstartUrlHelperTest that has never been correct
- Teach SystemManagerTest correct way to say Integer to Hibernate
- Removed UserManagerTest's fragile dependency on ordering of rhntimezone table
- SystemHandlerTest relied on changing a readonly Hibernate entity - look it up
instead
- ToolbarTagCloneTest relied on headers whose strings are no longer lowercase
- VirtualSystemsListActionTest relied on a page that has been renamed
- SessionSwapTest has always said 'DO NOT COMMIT THIS' - we should have
listened...
- Teach JarFinderTest to not rely on packages that live in more than one jar
- Teach AdvDataSourceTest to work even if test-table already exists
- Update StrutsTestCase to version that supports Struts 1.3

[2.7.79-1]
- fixed checkstyle errors on Fedora 26
- Remove more fedorahosted links

* Thu Jun 01 2017 Michael Calmer
- PR 519 - make country, state/province and city searchable for system location

[2.7.77-1]
- 1444047 - display alternative archs only from the same org
- Update system group details page

* Wed May 24 2017 Jan Dobes 2.7.76-1
- 1441219 - channel admin should be able to set org user restrictions for null-
org channels
- 1441219 - fixing exploit - user permission is not checked
- 1446310 - remove not existing links

* Tue May 23 2017 Grant Gainey 2.7.75-1
- 1368438 - Teach ListPackagesAction and list.jsp about packageChannels

* Tue May 23 2017 Grant Gainey 2.7.74-1
- 1005783 - I18N the 'NOT MAPPED' string of ISS
- 1324737 - polish API description

[2.7.73-1]
- java devel package is needed even in runtime (on RHEL6)

[2.7.72-1]
- fixed java developer setup (mainly ivy config)
- slf4j-log4j12 is in slf4j's subpackage on Fedora 25

* Fri May 19 2017 Grant Gainey 2.7.71-1
- 1452080 - Escape failure-text of failed-actions

* Tue May 16 2017 Grant Gainey 2.7.70-1
- 1067601 - Rename org-specific channel-family when org-name changes

* Fri May 12 2017 Laurence Rochfort
- 1436634 - PR 527 - Used StringBuilder correctly without '+' operator.
- 1436634 - PR 527 - Fix KS Default Download Location appending URL verbatim.

* Wed May 10 2017 Jan Dobes 2.7.68-1
- 1414406. Fix schedulePackage{Install,Remove}ByNevra arguments description.

* Tue May 09 2017 Grant Gainey 2.7.67-1
- 1445868 - Handle attempting to create ISS Master/Slave with existing FQDN
more gracefully
- 1440696 , fix updateRepoSsl description

* Mon May 08 2017 Can Bulut Bayburt
- PR 472 - Add 'Latest' back to button labels to make clear the latest version
will be copied - Eric Herget
- PR 472 - Update 'view/modify file' action buttons text

* Mon May 08 2017 Grant Gainey 2.7.65-1
- 1381857 - Teach Postgres to correctly-unique-ify rhnConfigInfo rows

* Mon May 08 2017 Silvio Moioli
- PR 485 - Leave System Set Manager page title as-is - Eric Herget
- PR 485 - SSM Task Log: make title coherent with menu item
- PR 485 - ssm_status.xml: format XML
- PR 485 - SSM Task Log page: put default as first tab
- PR 485 - Rename SSM page titles for consistency (bsc#979623)

[2.7.66-1]
- PR 476 - Change to support java version < 1.8
- PR 476 - SidenavRenderer: do not ouput empty class
- PR 476 - Use different symbols for collapsible sidebar items

* Fri May 05 2017 Grant Gainey 2.7.62-1
- 1448342 - Fix config-deploy success message

* Thu May 04 2017 Can Bulut Bayburt
- PR 483 - Hides 'Save/Clear' buttons when no changes are present in action
chain lists
- PR 483 - Fix plus/minus buttons in action chain list

[2.7.60-1]
- 1436746 - remove 'Add Selected to SSM' button, because now WebUI requires
enabled JavaScript

[2.7.59-1]
- recompile all packages with the same (latest) version of java
- point ivy to local jars installed from rpms
- fixed ant compile warning

[2.7.58-1]
- 1409537 Remove unused packages from KS > Rhel4

[2.7.57-1]
- PR478 - Fix notification order for Create Organization page - Silvio Moioli
- Remove unused imports.

* Thu Apr 27 2017 Grant Gainey 2.7.56-1
- 1445225 - Don't link a package if it doesn't have an id

* Thu Apr 27 2017 Grant Gainey 2.7.55-1
- 1445711 - Fix incorrect reference for id/name in JSP
- bz1441213. installation->removal in schedulePackageRemove,
remove->removal(for consistency), nerva->nevra

[2.7.54-1]
- use newer version of commons-digester on RHEL6
- newer version of commons-beanutils is needed on RHEL6
- some java packages has been built with java 1.8.0

[2.7.53-1]
- fixing upgrade on Fedora 24
- no more special jar handling is needed
- simplify mchange-commons setup

* Fri Apr 21 2017 Jan Dobes 2.7.52-1
- 1414454 - adding test
- 1414454 - adding channel.listManageableChannels API and changing select to
provide all expected fields for serializer

[2.7.51-1]
- resolving dependencies during upgrade on RHEL6
- resolving file conflicts on RHEL6 installation
- obsolete jpackage remnants on RHEL7
- 1441213 - fix description of api call

* Tue Apr 11 2017 Jan Dobes 2.7.50-1
- 1441219 - channel admin role shouldn't allow user to work with null-org
channels

[2.7.49-1]
- use fedora (not jpackage) version of concurrent
- unify file ownership across subpackages

[2.7.48-1]
- updated RHEL6 (Build)Requires according to new java packages

* Mon Apr 10 2017 Jan Dobes 2.7.47-1
- obsolete some more packages for successfull upgrade on rhel 7

[2.7.46-1]
- 1380311 - API client.channel.software.createRepo() in 5.8.0 allows 'yum' repo
type only, 5.7.0 used 'YUM'

[2.7.45-1]
- 1436746 - reverted commit 64d3df3b783c96548d53f31601c0e8322c23d8bc

[2.7.44-1]
- simplify rhn-search jar list

[2.7.43-1]
- fix perrmissions on /usr/share/spacewalk/taskomatic/*.jar

[2.7.42-1]
- run checkstyle on Fedora again
- fixed new checkstyle errors
- newer checkstyle requires commons-lang3
- use same requires on Fedora and RHEL7

[2.7.41-1]
- 1421115 - set number of bytes instead of length of java string for 'Content-
Length' HTTP-header

[2.7.40-1]
- simplified taskomatic jar dependencies by linking them into a single
directory

[2.7.39-1]
- include slf4j logger binding

[2.7.38-1]
- obsolete old jpackage rpms to make smooth upgrade

[2.7.37-1]
- 1408167 - add link to proxy system details page

[2.7.36-1]
- new cglib on Fedora 25 has different path

[2.7.35-1]
- jmock-junit3 and jmock-legacy has been split into different packages

[2.7.34-1]
- ProxyHandler: dead code removed
- struts-taglib is part of struts on Fedora / EPEL7
- hibernate on Fedora uses ehcache

[2.7.33-1]
- we need quartz v1 for build
- use standard objectweb-asm and cglib on all platforms
- use standard javamail on Fedora
- merged Requires/BuildRequires into a single ifdef (cleanup)
- jaf is a part of standard openjdk for a long time

[2.7.32-1]
- use standard apache-commons-fileupload on Fedora
- use standard apache-commons-el on Fedora
- use standard tomcat-taglibs-standard on Fedora

[2.7.31-1]
- Migrate to jMock2

[2.7.30-1]
- Updated links to github in spec files
- Migrating Fedorahosted to GitHub
- Fix SSM reboot action success messages
- Fix checkbox icon align
- Get rid of remaining