spacewalk-commits November 2013

spacewalk-commits@lists.fedorahosted.org

9 participants
202 discussions

Changes to 'refs/tags/spacewalk-java-1.9.85-1'
by Tomas Lestach 12 Nov '13

12 Nov '13

Tag 'spacewalk-java-1.9.85-1' created by Tomas Lestach <tlestach(a)redhat.com> at 2013-11-12 16:02 +0000 Tagging package [spacewalk-java] version [1.9.85-1] in directory [java/]. Changes since spacewalk-backend-1.9.49-1: Tomas Lestach (3): CVE-2013-4480 - restrict first user creation with need_first_user acl CVE-2013-4480 - restrict user creation to org_admin only Automatic commit of package [spacewalk-java] release [1.9.85-1]. --- java/code/webapp/WEB-INF/struts-config.xml | 2 ++ java/spacewalk-java.spec | 6 +++++- rel-eng/packages/spacewalk-java | 2 +- 3 files changed, 8 insertions(+), 2 deletions(-) ---

1 0

Branch 'SPACEWALK-1.9' - 3 commits - java/code java/spacewalk-java.spec rel-eng/packages
by Tomas Lestach 12 Nov '13

12 Nov '13

java/code/webapp/WEB-INF/struts-config.xml | 2 ++ java/spacewalk-java.spec | 6 +++++- rel-eng/packages/spacewalk-java | 2 +- 3 files changed, 8 insertions(+), 2 deletions(-) New commits: commit f7f384fad3197598b3779da0feca7b50185620d9 Author: Tomas Lestach <tlestach(a)redhat.com> Date: Tue Nov 12 17:02:11 2013 +0100 Automatic commit of package [spacewalk-java] release [1.9.85-1]. diff --git a/java/spacewalk-java.spec b/java/spacewalk-java.spec index e441e62..5138432 100644 --- a/java/spacewalk-java.spec +++ b/java/spacewalk-java.spec @@ -28,7 +28,7 @@ Name: spacewalk-java Summary: Spacewalk Java site packages Group: Applications/Internet License: GPLv2 -Version: 1.9.84 +Version: 1.9.85 Release: 1%{?dist} URL: https://fedorahosted.org/spacewalk Source0: https://fedorahosted.org/releases/s/p/spacewalk/%{name}-%{version}.tar.gz @@ -678,6 +678,10 @@ fi %{jardir}/postgresql-jdbc.jar %changelog +* Tue Nov 12 2013 Tomas Lestach <tlestach(a)redhat.com> 1.9.85-1 +- CVE-2013-4480 - restrict user creation to org_admin only +- CVE-2013-4480 - restrict first user creation with need_first_user acl + * Wed Mar 13 2013 Stephen Herr <sherr(a)redhat.com> 1.9.84-1 - 920813 - update to latest tree, not alphabetically last tree - 920489 - no longer allow change of the type of the key bu the action expects diff --git a/rel-eng/packages/spacewalk-java b/rel-eng/packages/spacewalk-java index 1b01d81..c456155 100644 --- a/rel-eng/packages/spacewalk-java +++ b/rel-eng/packages/spacewalk-java @@ -1 +1 @@ -1.9.84-1 java/ +1.9.85-1 java/ commit 57e5c2d84ee6be8c74b3e66a482abd6e539efabe Author: Tomas Lestach <tlestach(a)redhat.com> Date: Tue Nov 5 12:11:30 2013 +0100 CVE-2013-4480 - restrict user creation to org_admin only (cherry picked from commit 0204b18962a21f6d678166c043ff54491c5e700c) diff --git a/java/code/webapp/WEB-INF/struts-config.xml b/java/code/webapp/WEB-INF/struts-config.xml index a4e62ba..5fc260c 100644 --- a/java/code/webapp/WEB-INF/struts-config.xml +++ b/java/code/webapp/WEB-INF/struts-config.xml @@ -1369,6 +1369,7 @@ type="com.redhat.rhn.frontend.action.user.CreateUserAction" className="com.redhat.rhn.frontend.struts.RhnActionMapping"> <set-property property="postRequired" value="true" /> + <set-property property="acls" value="user_role(org_admin)"/> <forward name="existorgsuccess" path="/users/ActiveList.do" redirect="true"/> <forward name="failure" path="/users/CreateUser.do"/> commit 6fb2dc509d58c7fe561f65648fc82d52e0683167 Author: Tomas Lestach <tlestach(a)redhat.com> Date: Thu Oct 31 12:12:57 2013 +0100 CVE-2013-4480 - restrict first user creation with need_first_user acl (cherry picked from commit 60f69966e06599481ddd3337ecd47f33dab786ca) diff --git a/java/code/webapp/WEB-INF/struts-config.xml b/java/code/webapp/WEB-INF/struts-config.xml index 7702d39..a4e62ba 100644 --- a/java/code/webapp/WEB-INF/struts-config.xml +++ b/java/code/webapp/WEB-INF/struts-config.xml @@ -1355,6 +1355,7 @@ type="com.redhat.rhn.frontend.action.user.CreateUserAction" className="com.redhat.rhn.frontend.struts.RhnActionMapping"> <set-property property="postRequired" value="true" /> + <set-property property="acls" value="need_first_user()"/> <forward name="success_sat" path="/YourRhn.do" redirect="true"/> <forward name="fail-sat" path="/newlogin/CreateFirstUser.do"/>

1 0

Changes to 'refs/tags/spacewalk-java-2.0.6-1'
by Tomas Lestach 12 Nov '13

12 Nov '13

Tag 'spacewalk-java-2.0.6-1' created by Tomas Lestach <tlestach(a)redhat.com> at 2013-11-12 16:00 +0000 Tagging package [spacewalk-java] version [2.0.6-1] in directory [java/]. Changes since spacewalk-proxy-2.0.2-1: Tomas Lestach (3): CVE-2013-4480 - restrict first user creation with need_first_user acl CVE-2013-4480 - restrict user creation to org_admin only Automatic commit of package [spacewalk-java] release [2.0.6-1]. --- java/code/webapp/WEB-INF/struts-config.xml | 2 ++ java/spacewalk-java.spec | 6 +++++- rel-eng/packages/spacewalk-java | 2 +- 3 files changed, 8 insertions(+), 2 deletions(-) ---

1 0

Branch 'SPACEWALK-2.0' - 3 commits - java/code java/spacewalk-java.spec rel-eng/packages
by Tomas Lestach 12 Nov '13

12 Nov '13

java/code/webapp/WEB-INF/struts-config.xml | 2 ++ java/spacewalk-java.spec | 6 +++++- rel-eng/packages/spacewalk-java | 2 +- 3 files changed, 8 insertions(+), 2 deletions(-) New commits: commit 236937ede932ab15cb00a07846298eaa36c416c4 Author: Tomas Lestach <tlestach(a)redhat.com> Date: Tue Nov 12 17:00:47 2013 +0100 Automatic commit of package [spacewalk-java] release [2.0.6-1]. diff --git a/java/spacewalk-java.spec b/java/spacewalk-java.spec index 1b49fae..1a170a2 100644 --- a/java/spacewalk-java.spec +++ b/java/spacewalk-java.spec @@ -28,7 +28,7 @@ Name: spacewalk-java Summary: Spacewalk Java site packages Group: Applications/Internet License: GPLv2 -Version: 2.0.5 +Version: 2.0.6 Release: 1%{?dist} URL: https://fedorahosted.org/spacewalk Source0: https://fedorahosted.org/releases/s/p/spacewalk/%{name}-%{version}.tar.gz @@ -771,6 +771,10 @@ fi %{jardir}/postgresql-jdbc.jar %changelog +* Tue Nov 12 2013 Tomas Lestach <tlestach(a)redhat.com> 2.0.6-1 +- CVE-2013-4480 - restrict user creation to org_admin only +- CVE-2013-4480 - restrict first user creation with need_first_user acl + * Mon Aug 05 2013 Tomas Kasparek <tkasparek(a)redhat.com> 2.0.5-1 - Revert "987977 - Fix chaining of pkg-scheduling in SSM" - Revert "987977 - Fix there-can-be-solaris issue and make Upgrade behave like diff --git a/rel-eng/packages/spacewalk-java b/rel-eng/packages/spacewalk-java index acd5c69..d5f7943 100644 --- a/rel-eng/packages/spacewalk-java +++ b/rel-eng/packages/spacewalk-java @@ -1 +1 @@ -2.0.5-1 java/ +2.0.6-1 java/ commit f5be276199232679a78f7ee80c6a59b29021098d Author: Tomas Lestach <tlestach(a)redhat.com> Date: Tue Nov 5 12:11:30 2013 +0100 CVE-2013-4480 - restrict user creation to org_admin only (cherry picked from commit 0204b18962a21f6d678166c043ff54491c5e700c) diff --git a/java/code/webapp/WEB-INF/struts-config.xml b/java/code/webapp/WEB-INF/struts-config.xml index 5f02fca..577635b 100644 --- a/java/code/webapp/WEB-INF/struts-config.xml +++ b/java/code/webapp/WEB-INF/struts-config.xml @@ -1391,6 +1391,7 @@ type="com.redhat.rhn.frontend.action.user.CreateUserAction" className="com.redhat.rhn.frontend.struts.RhnActionMapping"> <set-property property="postRequired" value="true" /> + <set-property property="acls" value="user_role(org_admin)"/> <forward name="existorgsuccess" path="/users/ActiveList.do" redirect="true"/> <forward name="failure" path="/users/CreateUser.do"/> commit 9b4918fbdffae3d0c13f2e2aef7a95b976a2d322 Author: Tomas Lestach <tlestach(a)redhat.com> Date: Thu Oct 31 12:12:57 2013 +0100 CVE-2013-4480 - restrict first user creation with need_first_user acl (cherry picked from commit 60f69966e06599481ddd3337ecd47f33dab786ca) diff --git a/java/code/webapp/WEB-INF/struts-config.xml b/java/code/webapp/WEB-INF/struts-config.xml index 2df85f0..5f02fca 100644 --- a/java/code/webapp/WEB-INF/struts-config.xml +++ b/java/code/webapp/WEB-INF/struts-config.xml @@ -1377,6 +1377,7 @@ type="com.redhat.rhn.frontend.action.user.CreateUserAction" className="com.redhat.rhn.frontend.struts.RhnActionMapping"> <set-property property="postRequired" value="true" /> + <set-property property="acls" value="need_first_user()"/> <forward name="success_sat" path="/YourRhn.do" redirect="true"/> <forward name="fail-sat" path="/newlogin/CreateFirstUser.do"/>

1 0

Changes to 'refs/tags/spacewalk-java-2.1.72-1'
by Tomas Lestach 12 Nov '13

12 Nov '13

Tag 'spacewalk-java-2.1.72-1' created by Tomas Lestach <tlestach(a)redhat.com> at 2013-11-12 15:58 +0000 Tagging package [spacewalk-java] version [2.1.72-1] in directory [java/]. Changes since spacewalk-java-2.1.71-1: Tomas Lestach (3): CVE-2013-4480 - restrict first user creation with need_first_user acl CVE-2013-4480 - restrict user creation to org_admin only Automatic commit of package [spacewalk-java] release [2.1.72-1]. --- java/code/webapp/WEB-INF/struts-config.xml | 2 ++ java/spacewalk-java.spec | 6 +++++- rel-eng/packages/spacewalk-java | 2 +- 3 files changed, 8 insertions(+), 2 deletions(-) ---

1 0

3 commits - java/code java/spacewalk-java.spec rel-eng/packages
by Tomas Lestach 12 Nov '13

12 Nov '13

java/code/webapp/WEB-INF/struts-config.xml | 2 ++ java/spacewalk-java.spec | 6 +++++- rel-eng/packages/spacewalk-java | 2 +- 3 files changed, 8 insertions(+), 2 deletions(-) New commits: commit 876fb64b2967355a7fe2004f8f8f7b9fd9c73c3e Author: Tomas Lestach <tlestach(a)redhat.com> Date: Tue Nov 12 16:58:55 2013 +0100 Automatic commit of package [spacewalk-java] release [2.1.72-1]. diff --git a/java/spacewalk-java.spec b/java/spacewalk-java.spec index 5f0ece5..8df11a6 100644 --- a/java/spacewalk-java.spec +++ b/java/spacewalk-java.spec @@ -28,7 +28,7 @@ Name: spacewalk-java Summary: Spacewalk Java site packages Group: Applications/Internet License: GPLv2 -Version: 2.1.71 +Version: 2.1.72 Release: 1%{?dist} URL: https://fedorahosted.org/spacewalk Source0: https://fedorahosted.org/releases/s/p/spacewalk/%{name}-%{version}.tar.gz @@ -785,6 +785,10 @@ fi %{jardir}/postgresql-jdbc.jar %changelog +* Tue Nov 12 2013 Tomas Lestach <tlestach(a)redhat.com> 2.1.72-1 +- CVE-2013-4480 - restrict user creation to org_admin only +- CVE-2013-4480 - restrict first user creation with need_first_user acl + * Tue Nov 12 2013 Tomas Lestach <tlestach(a)redhat.com> 2.1.71-1 - 1029066 - enhance Package.listOrphans query - TestFactoryWrapperTest: avoid adding TestImpl.hbm.xml twice diff --git a/rel-eng/packages/spacewalk-java b/rel-eng/packages/spacewalk-java index d748668..e6d6e03 100644 --- a/rel-eng/packages/spacewalk-java +++ b/rel-eng/packages/spacewalk-java @@ -1 +1 @@ -2.1.71-1 java/ +2.1.72-1 java/ commit 0204b18962a21f6d678166c043ff54491c5e700c Author: Tomas Lestach <tlestach(a)redhat.com> Date: Tue Nov 5 12:11:30 2013 +0100 CVE-2013-4480 - restrict user creation to org_admin only diff --git a/java/code/webapp/WEB-INF/struts-config.xml b/java/code/webapp/WEB-INF/struts-config.xml index e122665..eb9a7ee 100644 --- a/java/code/webapp/WEB-INF/struts-config.xml +++ b/java/code/webapp/WEB-INF/struts-config.xml @@ -1445,6 +1445,7 @@ type="com.redhat.rhn.frontend.action.user.CreateUserAction" className="com.redhat.rhn.frontend.struts.RhnActionMapping"> <set-property property="postRequired" value="true" /> + <set-property property="acls" value="user_role(org_admin)"/> <forward name="existorgsuccess" path="/users/ActiveList.do" redirect="true"/> <forward name="failure" path="/users/CreateUser.do"/> commit 60f69966e06599481ddd3337ecd47f33dab786ca Author: Tomas Lestach <tlestach(a)redhat.com> Date: Thu Oct 31 12:12:57 2013 +0100 CVE-2013-4480 - restrict first user creation with need_first_user acl diff --git a/java/code/webapp/WEB-INF/struts-config.xml b/java/code/webapp/WEB-INF/struts-config.xml index babc41a..e122665 100644 --- a/java/code/webapp/WEB-INF/struts-config.xml +++ b/java/code/webapp/WEB-INF/struts-config.xml @@ -1431,6 +1431,7 @@ type="com.redhat.rhn.frontend.action.user.CreateUserAction" className="com.redhat.rhn.frontend.struts.RhnActionMapping"> <set-property property="postRequired" value="true" /> + <set-property property="acls" value="need_first_user()"/> <forward name="success_sat" path="/YourRhn.do" redirect="true"/> <forward name="fail-sat" path="/newlogin/CreateFirstUser.do"/>

1 0

Changes to 'refs/tags/spacewalk-java-2.1.71-1'
by Tomas Lestach 12 Nov '13

12 Nov '13

Tag 'spacewalk-java-2.1.71-1' created by Tomas Lestach <tlestach(a)redhat.com> at 2013-11-12 15:28 +0000 Tagging package [spacewalk-java] version [2.1.71-1] in directory [java/]. Changes since spacewalk-utils-2.1.22-1: Silvio Moioli (2): RhnServletListener: do not break subsequent testcases TestFactoryWrapperTest: avoid adding TestImpl.hbm.xml twice Tomas Lestach (2): 1029066 - enhance Package.listOrphans query Automatic commit of package [spacewalk-java] release [2.1.71-1]. --- java/code/src/com/redhat/rhn/common/hibernate/test/TestFactoryWrapperTest.java | 5 +---- java/code/src/com/redhat/rhn/domain/rhnpackage/Package_satellite.hbm.xml | 5 +---- java/code/src/com/redhat/rhn/webapp/RhnServletListener.java | 6 ++++++ java/spacewalk-java.spec | 7 ++++++- rel-eng/packages/spacewalk-java | 2 +- 5 files changed, 15 insertions(+), 10 deletions(-) ---

1 0

2 commits - java/code java/spacewalk-java.spec rel-eng/packages
by Tomas Lestach 12 Nov '13

12 Nov '13

java/code/src/com/redhat/rhn/domain/rhnpackage/Package_satellite.hbm.xml | 5 +---- java/spacewalk-java.spec | 7 ++++++- rel-eng/packages/spacewalk-java | 2 +- 3 files changed, 8 insertions(+), 6 deletions(-) New commits: commit 1a3fce718701b8a5dfff666237405c812d004513 Author: Tomas Lestach <tlestach(a)redhat.com> Date: Tue Nov 12 16:28:46 2013 +0100 Automatic commit of package [spacewalk-java] release [2.1.71-1]. diff --git a/java/spacewalk-java.spec b/java/spacewalk-java.spec index 6fa9ffe..5f0ece5 100644 --- a/java/spacewalk-java.spec +++ b/java/spacewalk-java.spec @@ -28,7 +28,7 @@ Name: spacewalk-java Summary: Spacewalk Java site packages Group: Applications/Internet License: GPLv2 -Version: 2.1.70 +Version: 2.1.71 Release: 1%{?dist} URL: https://fedorahosted.org/spacewalk Source0: https://fedorahosted.org/releases/s/p/spacewalk/%{name}-%{version}.tar.gz @@ -785,6 +785,11 @@ fi %{jardir}/postgresql-jdbc.jar %changelog +* Tue Nov 12 2013 Tomas Lestach <tlestach(a)redhat.com> 2.1.71-1 +- 1029066 - enhance Package.listOrphans query +- TestFactoryWrapperTest: avoid adding TestImpl.hbm.xml twice +- RhnServletListener: do not break subsequent testcases + * Mon Nov 11 2013 Tomas Lestach <tlestach(a)redhat.com> 2.1.70-1 - fix $Serializer macro expansion in API doc diff --git a/rel-eng/packages/spacewalk-java b/rel-eng/packages/spacewalk-java index 4a90640..d748668 100644 --- a/rel-eng/packages/spacewalk-java +++ b/rel-eng/packages/spacewalk-java @@ -1 +1 @@ -2.1.70-1 java/ +2.1.71-1 java/ commit 3934615463211e0f56660dd0029263b304c3c2bb Author: Tomas Lestach <tlestach(a)redhat.com> Date: Tue Nov 12 14:56:51 2013 +0100 1029066 - enhance Package.listOrphans query diff --git a/java/code/src/com/redhat/rhn/domain/rhnpackage/Package_satellite.hbm.xml b/java/code/src/com/redhat/rhn/domain/rhnpackage/Package_satellite.hbm.xml index 4206a60..3d42598 100644 --- a/java/code/src/com/redhat/rhn/domain/rhnpackage/Package_satellite.hbm.xml +++ b/java/code/src/com/redhat/rhn/domain/rhnpackage/Package_satellite.hbm.xml @@ -223,10 +223,7 @@ PUBLIC "-//Hibernate/Hibernate Mapping DTD 3.0//EN" <query name="Package.listOrphans"> <![CDATA[ select p from com.redhat.rhn.domain.rhnpackage.Package as p - where p.org = :org and not exists ( - select p - from com.redhat.rhn.domain.channel.Channel c - where p in elements(c.packages) ) + where p.org = :org and p.channels is empty ]]> </query>

1 0

2 commits - java/code
by Silvio Moioli 12 Nov '13

12 Nov '13

java/code/src/com/redhat/rhn/common/hibernate/test/TestFactoryWrapperTest.java | 5 +---- java/code/src/com/redhat/rhn/webapp/RhnServletListener.java | 6 ++++++ 2 files changed, 7 insertions(+), 4 deletions(-) New commits: commit b0510de4b735a33baeb39ca72327747250faf727 Author: Silvio Moioli <smoioli(a)suse.de> Date: Tue Nov 12 09:21:41 2013 +0100 TestFactoryWrapperTest: avoid adding TestImpl.hbm.xml twice ConnectionManager already includes the com.redhat.rhn.domain package, adding com.redhat.rhn.domain.test here results in a DuplicateMappingException. This is not fatal but can break subsequent tests. diff --git a/java/code/src/com/redhat/rhn/common/hibernate/test/TestFactoryWrapperTest.java b/java/code/src/com/redhat/rhn/common/hibernate/test/TestFactoryWrapperTest.java index a615fbd..beb9629 100644 --- a/java/code/src/com/redhat/rhn/common/hibernate/test/TestFactoryWrapperTest.java +++ b/java/code/src/com/redhat/rhn/common/hibernate/test/TestFactoryWrapperTest.java @@ -41,16 +41,13 @@ import junit.framework.TestSuite; */ public class TestFactoryWrapperTest extends RhnBaseTestCase { private static Logger log = Logger.getLogger(TestFactoryWrapperTest.class); - private static final String[] TEST_PACKAGE_NAMES = - {"com.redhat.rhn.domain.test"}; - public TestFactoryWrapperTest(String name) { super(name); } public void setUp() { - HibernateFactory.createSessionFactory(TEST_PACKAGE_NAMES); + HibernateFactory.createSessionFactory(); } public void testLookupReturnNull() throws Exception { commit f1f5c4b949a1eaf64151985490214da3025631fd Author: Silvio Moioli <smoioli(a)suse.de> Date: Mon Nov 11 12:07:15 2013 +0100 RhnServletListener: do not break subsequent testcases diff --git a/java/code/src/com/redhat/rhn/webapp/RhnServletListener.java b/java/code/src/com/redhat/rhn/webapp/RhnServletListener.java index b672430..02fdb64 100644 --- a/java/code/src/com/redhat/rhn/webapp/RhnServletListener.java +++ b/java/code/src/com/redhat/rhn/webapp/RhnServletListener.java @@ -136,6 +136,12 @@ public class RhnServletListener implements ServletContextListener { stopHibernate(); logStop("Hibernate"); + if (sce == null) { + // this has been called from the testsuite, next steps would + // break subsequent tests + return; + } + // This manually deregisters JDBC driver, // which prevents Tomcat from complaining about memory leaks Enumeration<Driver> drivers = DriverManager.getDrivers();

1 0

Changes to 'refs/tags/spacewalk-utils-2.1.22-1'
by Michael Mraka 12 Nov '13

12 Nov '13

Tag 'spacewalk-utils-2.1.22-1' created by Michael Mraka <michael.mraka(a)redhat.com> at 2013-11-12 07:53 +0000 Tagging package [spacewalk-utils] version [2.1.22-1] in directory [utils/]. Changes since spacewalk-java-2.1.70-1: Avi Miller (1): Added Oracle Linux channels for UEKR3, as well as Spacewalk 2.0 Server/Client for OL6 and Client for OL5 Michael Mraka (1): Automatic commit of package [spacewalk-utils] release [2.1.22-1]. --- rel-eng/packages/spacewalk-utils | 2 +- utils/spacewalk-common-channels.ini | 28 ++++++++++++++++++++++++++++ utils/spacewalk-utils.spec | 6 +++++- 3 files changed, 34 insertions(+), 2 deletions(-) ---

1 0

← Newer
1
...
13
14
15
16
17
18
19
20
21
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

spacewalk-commits November 2013