Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-27072

(8.0.z) Update process should check version and not allow reversion through update

XMLWordPrintable

    • False
    • None
    • False

      Our partners in Japan have discovered that it is possible to "revert" an update by "updating" to the previous version by following the steps in 3.2. Updating JBoss EAP offline using the jboss-eap-installation-manager and using an earlier version's repository; i.e. one can go from 8.0.1.1 to 8.0.1 by doing an "update perform" with the 8.0.1 maven-repository. The update will be shown as an "update" in the history, even though technically it was a downgrade/reversion.

      $ /opt/rh/eap8.0/jboss-eap-8.0/bin/jboss-cli.sh -c "installer history"
      [22bd37d2] 2024-05-09T04:57:07Z - update [org.jboss.eap.channels:eap-8.0::1.1.0.GA-redhat-00001]   <-- update (downgrade?) to 8.0.1
      [ca214488] 2024-05-09T04:56:07Z - update [org.jboss.eap.channels:eap-8.0::1.1.1.GA-redhat-00002]   <-- update to 8.0.1.1
      [3268b557] 2024-01-19T09:04:16Z - install [org.jboss.eap.channels:eap-8.0::1.0.1.GA-redhat-00003]  <-- install 8.0.1
      

      The update process should check the current and "new" version of the patch (1.1.1.GA-redhat-00002 vs 1.1.0.GA-redhat-00001) and not allow the user to install an older version, perhaps informing them to use "revert" instead.

              parsharm Parul Sharma
              rhn-support-mkawakam Manabu Kawakami
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated: