Chapter 1. Major Corrections 4.2.3

The following are the major bug fixes and changes released as part of Red Hat Network 4.2.3.

For users who are upgrading to RHN Satellite Server 4.2.3, a new rhn-satellite-config file is part of the release. Any API and Kickstart profiles will not function unless the following steps are completed.

To download, install, and apply the new configuration options:
1. Backup your current configuration files:
```
mkdir /etc/sysconfig/rhn/backup-423; cp -avf /etc/httpd/conf/ /etc/sysconfig/rhn/backup-423/
```
2. Upgrade to RHN Satellite 423 if you have not already done so by performing either:
```
up2date -l
up2date -u
```
  or:
```
 up2date rhn-satellite-config
```
3. Deploy the configuration files:
```
 /usr/bin/satcon-deploy-tree.pl \
 --source=/etc/sysconfig/rhn-satellite-prep/etc/httpd/conf \
 --dest=/etc/httpd/conf \
 --conf=/etc/sysconfig/rhn-satellite-prep/satellite-local-rules.conf
```
4. Restart Satellite services:
```
service rhn-satellite restart
```
After performing an upgrade, up2date automatically subscribes to the Red Hat Base Channel by default. However, if you want to retain customized channels subscriptions after upgrade you must set the reset_base_channel option in rhn_server.conf file to 0 on the Satellite. The channel subscriptions are retained the next time up2date checks in with the Satellite.
Configuration Channels are now ordered according to numerical value.
rhnpush now reports an error if /var/satellite contains a file system error.
An issue with the Deactivated users page that caused an Internal Server Error has been fixed.
A bug has been fixed that prevented using yum in the %post section of kickstart profiles.

An issue has been fixed where fetching repository data from a Satellite caused the following message in the /var/log/httpd/error_log file:

Exception exceptions.ValueError: 'I/O operation on closed file' in <bound method
File.__del__ of <rhn.transports.File instance at 0xb75b486c>> ignored

An issue has been fixed where imported custom channels do not appear on the Manage Software Channels page.
An issue has been addressed within the RHN Satellite Server repodata cache, which is used by the Red Hat Enterprise Linux 5.2 yum client for dependency resolution.
RHN Satellite Server now displays a proper error message when a package with an unsupported architecture is added to a package profile.
RPM packages in custom RHN Proxy Server channels that exist only on the proxy server are now available to Red Hat Enterprise Linux 5 clients.
This release adds backported fixes for a number of security vulnerabilities that affected the various components of RHN Satellite Server. These vulnerabilities would not normally be exposed to users of RHN Satellite Server and the configuration and normal use of the components would mitigate any risk.
A cross-site scripting flaw was found in the Red Hat Network channel search. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2007-6421 to this issue.