{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "full fix for XSA-226, replacing workaround\ndrop conflict of xendomain and libvirtd as can cause problems (#1398590)\nadd-to-physmap error paths fail to release lock on ARM [XSA-235] (#1484476)\nQemu: audio: host memory leakage via capture buffer [CVE-2017-8309]\n(#1446521)\nQemu: input: host memory leakage via keyboard events [CVE-2017-8379]\n(#1446561)\n\n----\n\nQemu: serial: host memory leakage 16550A UART emulation [CVE-2017-5579]\n(#1416162)\nQemu: display: cirrus: OOB read access issue [CVE-2017-7718] (#1443444)\nxen: various flaws (#1481765)\nmultiple problems with transitive grants [XSA-226, CVE-2017-12135]\nx86: PV privilege escalation via map_grant_ref [XSA-227, CVE-2017-12137]\ngrant_table: Race conditions with maptrack free list handling\n[XSA-228, CVE-2017-12136]\ngrant_table: possibly premature clearing of GTF_writing / GTF_reading\n[XSA-230, CVE-2017-12855]", "type": "security", "status": "obsolete", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": false, "critpath": true, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-08-24 22:57:38", "date_modified": null, "date_approved": null, "date_testing": "2017-08-26 20:23:23", "date_stable": null, "alias": "FEDORA-2017-978bebe3a7", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-08-26 20:23:23", "meets_testing_requirements": false, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2017-978bebe3a7", "title": "xen-4.7.3-3.fc25", "version_hash": "8c823e1e93f5478631d103f2d412f2158f9ec354", "release": {"name": "F25", "long_name": "Fedora 25", "version": "25", "id_prefix": "FEDORA", "branch": "f25", "dist_tag": "f25", "stable_tag": "f25-updates", "testing_tag": "f25-updates-testing", "candidate_tag": "f25-updates-candidate", "pending_signing_tag": "f25-signing-pending", "pending_testing_tag": "f25-updates-testing-pending", "pending_stable_tag": "f25-updates-pending", "override_tag": "f25-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "myoung", "email": "m.a.young@durham.ac.uk", "id": 129, "avatar": "https://seccdn.libravatar.org/avatar/cafef3050bdaacd4f890e9dfb2c45ae779cd95d6f836095f281368927146a63a?s=24&d=retro", "openid": "myoung.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by myoung. ", "timestamp": "2017-08-24 22:57:38", "update_id": 94954, "user_id": 91, "id": 650602, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [xen-4.7.3-2.fc25](https://bodhi.fedoraproject.org/updates/FEDORA-2017-a52a46ba78), and has inherited its bugs and notes.", "timestamp": "2017-08-24 22:57:43", "update_id": 94954, "user_id": 91, "id": 650604, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-08-26 22:38:26", "update_id": 94954, "user_id": 91, "id": 651122, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2017-08-29 01:34:59", "update_id": 94954, "user_id": 124, "id": 651698, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "filiperosset", "email": "rosset.filipe@gmail.com", "id": 124, "avatar": "https://seccdn.libravatar.org/avatar/f4394b8fb4c9a99c4b534dc724912fe75a5b87fe15048985ece8388c2441d0ca?s=24&d=retro", "openid": "filiperosset.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "fedora-br"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been obsoleted by [xen-4.7.3-4.fc25](https://bodhi.fedoraproject.org/updates/FEDORA-2017-ed735463e3).", "timestamp": "2017-08-30 23:12:32", "update_id": 94954, "user_id": 91, "id": 652405, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "xen-4.7.3-3.fc25", "signed": true, "release_id": 15, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1398590, "title": "libvirtd doesn't start after reboot even though it's 'enabled'", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 650358, "bug_id": 1398590, "comment": {"karma": 1, "karma_critpath": 1, "text": "working fine", "timestamp": "2017-08-24 11:27:33", "update_id": 94869, "user_id": 417, "id": 650358, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 1416162, "title": "CVE-2017-5579 xen: Qemu: serial: host memory leakage 16550A UART emulation [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1443444, "title": "CVE-2017-7718 xen: Qemu: display: cirrus: OOB read access issue [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1446517, "title": "CVE-2017-8309 Qemu: audio: host memory leakage via capture buffer", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 634888, "bug_id": 1446517, "comment": {"karma": 1, "karma_critpath": 1, "text": "No regressions noted.", "timestamp": "2017-07-14 02:26:08", "update_id": 92218, "user_id": 194, "id": 634888, "testcase_feedback": [], "user": {"name": "dhgutteridge", "email": "dhgutteridge@hotmail.com", "id": 194, "avatar": "https://seccdn.libravatar.org/avatar/95e7a46aa03707373935111628c2b387339f570b9175d20455a53fd00acafbcb?s=24&d=retro", "openid": "dhgutteridge.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 635344, "bug_id": 1446517, "comment": {"karma": 1, "karma_critpath": 0, "text": "No regressions.", "timestamp": "2017-07-15 00:51:28", "update_id": 92218, "user_id": 273, "id": 635344, "testcase_feedback": [], "user": {"name": "wolnei", "email": "e@wolnei.com.br", "id": 273, "avatar": "https://seccdn.libravatar.org/avatar/80619c350617edf030f2667bd8ffe77ff68f515022f339677c4571a0b2ec8296?s=24&d=retro", "openid": "wolnei.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "fedora-br"}, {"name": "triagers"}, {"name": "advocates"}]}}}, {"karma": 0, "comment_id": 637723, "bug_id": 1446517, "comment": {"karma": 1, "karma_critpath": 1, "text": "I tested this on my development system with vagrant-libvirt and the things I do seem to work well.", "timestamp": "2017-07-20 22:54:32", "update_id": 92218, "user_id": 2897, "id": 637723, "testcase_feedback": [], "user": {"name": "bowlofeggs", "email": "randy@electronsweatshop.com", "id": 2897, "avatar": "https://seccdn.libravatar.org/avatar/74e6735e7dfd745bcd1aba3f64ead2d32631373aae819d812c28f339c5700ed8?s=24&d=retro", "openid": "bowlofeggs.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "communishift"}, {"name": "atomic-wg"}, {"name": "erlang"}, {"name": "erlang-maint-sig"}]}}}, {"karma": 0, "comment_id": 644940, "bug_id": 1446517, "comment": {"karma": 0, "karma_critpath": 0, "text": "", "timestamp": "2017-08-08 17:03:38", "update_id": 92217, "user_id": 207, "id": 644940, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 650358, "bug_id": 1446517, "comment": {"karma": 1, "karma_critpath": 1, "text": "working fine", "timestamp": "2017-08-24 11:27:33", "update_id": 94869, "user_id": 417, "id": 650358, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 1446521, "title": "CVE-2017-8309 xen: Qemu: audio: host memory lekage via capture buffer [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 650358, "bug_id": 1446521, "comment": {"karma": 1, "karma_critpath": 1, "text": "working fine", "timestamp": "2017-08-24 11:27:33", "update_id": 94869, "user_id": 417, "id": 650358, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 1446547, "title": "CVE-2017-8379 Qemu: input: host memory lekage via keyboard events", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 634888, "bug_id": 1446547, "comment": {"karma": 1, "karma_critpath": 1, "text": "No regressions noted.", "timestamp": "2017-07-14 02:26:08", "update_id": 92218, "user_id": 194, "id": 634888, "testcase_feedback": [], "user": {"name": "dhgutteridge", "email": "dhgutteridge@hotmail.com", "id": 194, "avatar": "https://seccdn.libravatar.org/avatar/95e7a46aa03707373935111628c2b387339f570b9175d20455a53fd00acafbcb?s=24&d=retro", "openid": "dhgutteridge.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 635344, "bug_id": 1446547, "comment": {"karma": 1, "karma_critpath": 0, "text": "No regressions.", "timestamp": "2017-07-15 00:51:28", "update_id": 92218, "user_id": 273, "id": 635344, "testcase_feedback": [], "user": {"name": "wolnei", "email": "e@wolnei.com.br", "id": 273, "avatar": "https://seccdn.libravatar.org/avatar/80619c350617edf030f2667bd8ffe77ff68f515022f339677c4571a0b2ec8296?s=24&d=retro", "openid": "wolnei.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "fedora-br"}, {"name": "triagers"}, {"name": "advocates"}]}}}, {"karma": 0, "comment_id": 637723, "bug_id": 1446547, "comment": {"karma": 1, "karma_critpath": 1, "text": "I tested this on my development system with vagrant-libvirt and the things I do seem to work well.", "timestamp": "2017-07-20 22:54:32", "update_id": 92218, "user_id": 2897, "id": 637723, "testcase_feedback": [], "user": {"name": "bowlofeggs", "email": "randy@electronsweatshop.com", "id": 2897, "avatar": "https://seccdn.libravatar.org/avatar/74e6735e7dfd745bcd1aba3f64ead2d32631373aae819d812c28f339c5700ed8?s=24&d=retro", "openid": "bowlofeggs.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "communishift"}, {"name": "atomic-wg"}, {"name": "erlang"}, {"name": "erlang-maint-sig"}]}}}, {"karma": 0, "comment_id": 644940, "bug_id": 1446547, "comment": {"karma": 0, "karma_critpath": 0, "text": "", "timestamp": "2017-08-08 17:03:38", "update_id": 92217, "user_id": 207, "id": 644940, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 650358, "bug_id": 1446547, "comment": {"karma": 1, "karma_critpath": 1, "text": "working fine", "timestamp": "2017-08-24 11:27:33", "update_id": 94869, "user_id": 417, "id": 650358, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 1446561, "title": "CVE-2017-8379 xen: Qemu: input: host memory lekage via keyboard events [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 650358, "bug_id": 1446561, "comment": {"karma": 1, "karma_critpath": 1, "text": "working fine", "timestamp": "2017-08-24 11:27:33", "update_id": 94869, "user_id": 417, "id": 650358, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 1477651, "title": "CVE-2017-12136 xsa228 xen: grant_table: Race conditions with maptrack free list handling (XSA-228)", "security": true, "parent": true, "feedback": []}, {"bug_id": 1477655, "title": "CVE-2017-12135 xsa226 xen: possibly unbounded recursion in grant table code (XSA-226)", "security": true, "parent": true, "feedback": []}, {"bug_id": 1477657, "title": "CVE-2017-12137 xsa227 xen: x86: PV privilege escalation via map_grant_ref (XSA-227)", "security": true, "parent": true, "feedback": []}, {"bug_id": 1481762, "title": "CVE-2017-12855 xsa230 CVE-2017-12855 xen: grant_table: possibly premature clearing of GTF_writing / GTF_reading  (XSA-230)", "security": true, "parent": true, "feedback": []}, {"bug_id": 1481765, "title": "CVE-2017-12134 CVE-2017-12135 CVE-2017-12136 CVE-2017-12137 CVE-2017-12855 xen: various flaws [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1484476, "title": "xsa235 xen: add-to-physmap error paths fail to release lock on ARM", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 650358, "bug_id": 1484476, "comment": {"karma": 1, "karma_critpath": 1, "text": "working fine", "timestamp": "2017-08-24 11:27:33", "update_id": 94869, "user_id": 417, "id": 650358, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}], "updateid": "FEDORA-2017-978bebe3a7", "karma": 1, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}