patchman 4.0.10__tar.gz → 4.0.12__tar.gz

{patchman-4.0.10 → patchman-4.0.12}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: patchman
-Version: 4.0.10
+Version: 4.0.12
 Summary: Django based patch status monitoring tool for linux systems
 Home-page: http://patchman.openbytes.ie/
 Author: Marcus Furlong

patchman-4.0.12/VERSION.txt

@@ -0,0 +1 @@
+4.0.12

{patchman-4.0.10 → patchman-4.0.12}/errata/models.py

@@ -149,7 +149,6 @@ class Erratum(models.Model):
     def add_fixed_packages(self, packages):
         for package in packages:
             self.fixed_packages.add(package)
-        self.save()
 
     def add_affected_packages(self, packages):
         for package in packages:

{patchman-4.0.10 → patchman-4.0.12}/errata/tests/test_models.py

@@ -239,3 +239,22 @@ class ErratumCachedCountTests(TestCase):
         self.erratum.refresh_from_db()
         self.assertEqual(self.erratum.cves_count, self.erratum.cves.count())
         self.assertEqual(self.erratum.osreleases_count, self.erratum.osreleases.count())
+
+    def test_add_fixed_packages_no_stale_save(self):
+        """Test that add_fixed_packages does not overwrite cached counts.
+
+        Regression test: add_fixed_packages previously called self.save()
+        after the M2M .add() loop, which overwrote the signal-updated
+        fixed_packages_count with the stale in-memory value.
+        """
+        from arch.models import PackageArchitecture
+        from packages.models import Package, PackageName
+        pkg_arch = PackageArchitecture.objects.create(name='amd64')
+        pkg_name = PackageName.objects.create(name='libssl3')
+        pkg = Package.objects.create(
+            name=pkg_name, arch=pkg_arch, epoch='',
+            version='3.0.1', release='1', packagetype='D'
+        )
+        self.erratum.add_fixed_packages({pkg})
+        self.erratum.refresh_from_db()
+        self.assertEqual(self.erratum.fixed_packages_count, 1)

{patchman-4.0.10 → patchman-4.0.12}/etc/patchman/apache.conf.example

@@ -1,6 +1,7 @@
 Define patchman_pythonpath /srv/patchman/
 WSGIScriptAlias /patchman ${patchman_pythonpath}/patchman/wsgi.py application-group=%{GLOBAL}
 WSGIPythonPath ${patchman_pythonpath}
+WSGIPassAuthorization On
 
 <Directory ${patchman_pythonpath}>
     <Files wsgi.py>

{patchman-4.0.10 → patchman-4.0.12}/hosts/tests/test_models.py

@@ -128,3 +128,66 @@ class HostMethodTests(TestCase):
         self.assertEqual(self.host.get_num_security_updates(), 1)
         self.assertEqual(self.host.get_num_bugfix_updates(), 1)
         self.assertEqual(self.host.get_num_updates(), 2)
+
+    def test_cached_counts_survive_full_save(self):
+        """Test that cached update counts are not overwritten by a full save.
+
+        Regression test: M2M signals update cached count fields via
+        save(update_fields=[...]), but a subsequent full save() on the
+        same in-memory instance would overwrite them with stale values.
+        """
+        pkg_arch = PackageArchitecture.objects.create(name='amd64')
+        pkg_name = PackageName.objects.create(name='curl')
+        old_pkg = Package.objects.create(
+            name=pkg_name, arch=pkg_arch, epoch='',
+            version='7.0.0', release='1', packagetype='D'
+        )
+        new_pkg = Package.objects.create(
+            name=pkg_name, arch=pkg_arch, epoch='',
+            version='7.0.1', release='1', packagetype='D'
+        )
+        sec_update = PackageUpdate.objects.create(
+            oldpackage=old_pkg, newpackage=new_pkg, security=True
+        )
+
+        # simulate the find_host_updates_homogenous pattern:
+        # M2M add fires signal, then full save follows
+        self.host.updates.add(sec_update)
+        self.host.refresh_from_db(fields=['sec_updates_count', 'bug_updates_count'])
+        self.host.updated_at = timezone.now()
+        self.host.save()
+
+        # re-read from DB to verify counts persisted
+        self.host.refresh_from_db()
+        self.assertEqual(self.host.sec_updates_count, 1)
+        self.assertEqual(self.host.bug_updates_count, 0)
+
+    def test_in_memory_counts_stale_after_m2m_signal(self):
+        """Test that in-memory instance has updated counts after M2M signal.
+
+        The M2M signal updates the DB directly via save(update_fields=[...]).
+        Django also updates the in-memory instance, but on MySQL with
+        REPEATABLE READ isolation and full save(), the stale snapshot can
+        overwrite the DB values. The refresh_from_db pattern in
+        find_host_updates_homogenous prevents this.
+        """
+        pkg_arch = PackageArchitecture.objects.create(name='amd64')
+        pkg_name = PackageName.objects.create(name='wget')
+        old_pkg = Package.objects.create(
+            name=pkg_name, arch=pkg_arch, epoch='',
+            version='1.0.0', release='1', packagetype='D'
+        )
+        new_pkg = Package.objects.create(
+            name=pkg_name, arch=pkg_arch, epoch='',
+            version='1.0.1', release='1', packagetype='D'
+        )
+        bug_update = PackageUpdate.objects.create(
+            oldpackage=old_pkg, newpackage=new_pkg, security=False
+        )
+
+        # M2M add fires signal — DB has correct count
+        self.host.updates.add(bug_update)
+
+        # verify DB has the correct value
+        db_host = Host.objects.get(pk=self.host.pk)
+        self.assertEqual(db_host.bug_updates_count, 1)

{patchman-4.0.10 → patchman-4.0.12}/hosts/utils.py

@@ -69,7 +69,10 @@ def get_or_create_host(report, arch, osvariant, domain):
                 host.reboot_required = True
             else:
                 host.reboot_required = False
-            host.save()
+            host.save(update_fields=[
+                'ipaddress', 'kernel', 'arch', 'osvariant',
+                'domain', 'lastreport', 'reboot_required',
+            ])
     except IntegrityError as e:
         error_message(text=e)
     if host:
@@ -94,6 +97,7 @@ def find_host_updates_homogenous(hosts, verbose=False):
             host.find_updates()
             if verbose:
                 info_message(text='')
+            host.refresh_from_db(fields=['sec_updates_count', 'bug_updates_count', 'errata_count'])
             host.updated_at = ts
             host.save()
 
@@ -114,6 +118,7 @@ def find_host_updates_homogenous(hosts, verbose=False):
                     continue
 
                 fhost.updates.set(updates)
+                fhost.refresh_from_db(fields=['sec_updates_count', 'bug_updates_count'])
                 fhost.updated_at = ts
                 fhost.save()
                 updated_host_ids.add(fhost.id)

{patchman-4.0.10 → patchman-4.0.12}/patchman.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: patchman
-Version: 4.0.10
+Version: 4.0.12
 Summary: Django based patch status monitoring tool for linux systems
 Home-page: http://patchman.openbytes.ie/
 Author: Marcus Furlong

{patchman-4.0.10 → patchman-4.0.12}/patchman.egg-info/SOURCES.txt

@@ -74,7 +74,7 @@ etc/patchman/apache.conf.example
 etc/patchman/celery.conf
 etc/patchman/local_settings.py
 etc/systemd/system/patchman-celery-beat.service
-etc/systemd/system/patchman-celery-worker.service
+etc/systemd/system/patchman-celery-worker@.service
 hosts/__init__.py
 hosts/admin.py
 hosts/apps.py

{patchman-4.0.10 → patchman-4.0.12}/reports/utils.py

@@ -611,7 +611,8 @@ def get_os(os, arch):
         lts = ''
         if 'LTS' in os:
             lts = ' LTS'
-        major, minor, patch = os.split(' ')[1].split('.')
+        os_ver = os.split(' ')[1].split('.')
+        major, minor = os_ver[0], os_ver[1]
         ubuntu_version = f'{major}_{minor}'
         osrelease_name = f'Ubuntu {major}.{minor}{lts}'
         cpe_name = f"cpe:2.3:o:canonical:ubuntu_linux:{ubuntu_version}:*:*:*:{'lts' if lts else '*'}:*:*:*"

patchman-4.0.10/VERSION.txt

@@ -1 +0,0 @@
-4.0.10