{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "fixes bugs #1598872  and security update\n", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2018-07-29 10:32:53", "date_modified": "2018-07-29 10:35:42", "date_approved": null, "date_testing": "2018-07-29 23:51:05", "date_stable": "2018-08-22 10:42:41", "alias": "FEDORA-2018-0a61e79f56", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2018-08-22 10:42:41", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2018-0a61e79f56", "title": "dpkg-1.18.25-1.fc27", "version_hash": "5100f52236c5fb5d73d22592a7fcbd9f62625251", "release": {"name": "F27", "long_name": "Fedora 27", "version": "27", "id_prefix": "FEDORA", "branch": "f27", "dist_tag": "f27", "stable_tag": "f27-updates", "testing_tag": "f27-updates-testing", "candidate_tag": "f27-updates-candidate", "pending_signing_tag": "f27-signing-pending", "pending_testing_tag": "f27-updates-testing-pending", "pending_stable_tag": "f27-updates-pending", "override_tag": "f27-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "sergiomb", "email": "sergio@serjux.com", "id": 271, "avatar": "https://seccdn.libravatar.org/avatar/cb1e1c02b91fca7534374ad3e77409014e4c30c6de47356f36099793f08cc1de?s=24&d=retro", "openid": "sergiomb.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "clamav"}, {"name": "multimedia-sig"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by sergiomb. ", "timestamp": "2018-07-29 10:32:53", "update_id": 120031, "user_id": 91, "id": 816445, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "sergiomb edited this update.", "timestamp": "2018-07-29 10:35:41", "update_id": 120031, "user_id": 91, "id": 816448, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2018-07-29 23:51:37", "update_id": 120031, "user_id": 91, "id": 816528, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2018-08-06 00:00:18", "update_id": 120031, "user_id": 91, "id": 819102, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "works", "timestamp": "2018-08-18 02:48:10", "update_id": 120031, "user_id": 4444, "id": 823762, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "lobocode", "email": "lobocode@gmail.com", "id": 4444, "avatar": "https://seccdn.libravatar.org/avatar/a8bb6852567afba4c253c348c2a8d2c79ea12ca21039b751fb7bf10fc2c4c277?s=24&d=retro", "openid": "lobocode.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for batched by sergiomb. ", "timestamp": "2018-08-21 23:36:01", "update_id": 120031, "user_id": 91, "id": 824921, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2018-08-22 03:00:21", "update_id": 120031, "user_id": 91, "id": 825081, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2018-08-22 10:43:38", "update_id": 120031, "user_id": 91, "id": 825260, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "dpkg-1.18.25-1.fc27", "signed": true, "release_id": 17, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1537792, "title": "dpkg: directory traversal via /DEBIAN symlink", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 831506, "bug_id": 1537792, "comment": {"karma": 0, "karma_critpath": 0, "text": "dpkg-deb --build $BUILD_DIR/package-name $BUILD_DIR/package-name.deb \ndpkg-deb: building package 'package-name' in '/build/package-name.deb'.\ntar: unrecognized option '--clamp-mtime'\nTry `tar --help' or `tar --usage' for more information.\ndpkg-deb: error: subprocess tar -cf returned error exit status 64\n\nI traced this down to a recent dpkg-deb change that seems to require a newer version of tar to use --build.  I confirmed this by building the latest tar, and the error went away.\n\nVersion That doesn't work:\ntar --version\ntar (GNU tar) 1.26\n\nWhen I built the following, everything worked:\ntar --version\ntar (GNU tar) 1.30\n\nFrom the docs, it looks like 1.28 is the required version\n\nCan we please update the spec to require 1.28.  Or roll back the change that requires this version?  ( RHEL/CentOS repos only make 1.26 available )", "timestamp": "2018-09-07 20:30:42", "update_id": 120032, "user_id": 207, "id": 831506, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 831654, "bug_id": 1537792, "comment": {"karma": 0, "karma_critpath": 0, "text": "Let's talk in https://bugzilla.redhat.com/show_bug.cgi?id=1626465", "timestamp": "2018-09-08 06:03:12", "update_id": 120032, "user_id": 150, "id": 831654, "testcase_feedback": [], "user": {"name": "cheeselee", "email": "robinlee.sysu@gmail.com", "id": 150, "avatar": "https://seccdn.libravatar.org/avatar/2480bd88bf66d2f3c4e20b36b2d76e40db49f4aa73fddba203bdeaf57214d91c?s=24&d=retro", "openid": "cheeselee.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "packager-zh"}, {"name": "deepinde-sig"}]}}}]}, {"bug_id": 1537793, "title": "dpkg: directory traversal via /DEBIAN symlink [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 831506, "bug_id": 1537793, "comment": {"karma": 0, "karma_critpath": 0, "text": "dpkg-deb --build $BUILD_DIR/package-name $BUILD_DIR/package-name.deb \ndpkg-deb: building package 'package-name' in '/build/package-name.deb'.\ntar: unrecognized option '--clamp-mtime'\nTry `tar --help' or `tar --usage' for more information.\ndpkg-deb: error: subprocess tar -cf returned error exit status 64\n\nI traced this down to a recent dpkg-deb change that seems to require a newer version of tar to use --build.  I confirmed this by building the latest tar, and the error went away.\n\nVersion That doesn't work:\ntar --version\ntar (GNU tar) 1.26\n\nWhen I built the following, everything worked:\ntar --version\ntar (GNU tar) 1.30\n\nFrom the docs, it looks like 1.28 is the required version\n\nCan we please update the spec to require 1.28.  Or roll back the change that requires this version?  ( RHEL/CentOS repos only make 1.26 available )", "timestamp": "2018-09-07 20:30:42", "update_id": 120032, "user_id": 207, "id": 831506, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 831654, "bug_id": 1537793, "comment": {"karma": 0, "karma_critpath": 0, "text": "Let's talk in https://bugzilla.redhat.com/show_bug.cgi?id=1626465", "timestamp": "2018-09-08 06:03:12", "update_id": 120032, "user_id": 150, "id": 831654, "testcase_feedback": [], "user": {"name": "cheeselee", "email": "robinlee.sysu@gmail.com", "id": 150, "avatar": "https://seccdn.libravatar.org/avatar/2480bd88bf66d2f3c4e20b36b2d76e40db49f4aa73fddba203bdeaf57214d91c?s=24&d=retro", "openid": "cheeselee.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "packager-zh"}, {"name": "deepinde-sig"}]}}}]}, {"bug_id": 1537794, "title": "dpkg: directory traversal via /DEBIAN symlink [epel-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 831506, "bug_id": 1537794, "comment": {"karma": 0, "karma_critpath": 0, "text": "dpkg-deb --build $BUILD_DIR/package-name $BUILD_DIR/package-name.deb \ndpkg-deb: building package 'package-name' in '/build/package-name.deb'.\ntar: unrecognized option '--clamp-mtime'\nTry `tar --help' or `tar --usage' for more information.\ndpkg-deb: error: subprocess tar -cf returned error exit status 64\n\nI traced this down to a recent dpkg-deb change that seems to require a newer version of tar to use --build.  I confirmed this by building the latest tar, and the error went away.\n\nVersion That doesn't work:\ntar --version\ntar (GNU tar) 1.26\n\nWhen I built the following, everything worked:\ntar --version\ntar (GNU tar) 1.30\n\nFrom the docs, it looks like 1.28 is the required version\n\nCan we please update the spec to require 1.28.  Or roll back the change that requires this version?  ( RHEL/CentOS repos only make 1.26 available )", "timestamp": "2018-09-07 20:30:42", "update_id": 120032, "user_id": 207, "id": 831506, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 831654, "bug_id": 1537794, "comment": {"karma": 0, "karma_critpath": 0, "text": "Let's talk in https://bugzilla.redhat.com/show_bug.cgi?id=1626465", "timestamp": "2018-09-08 06:03:12", "update_id": 120032, "user_id": 150, "id": 831654, "testcase_feedback": [], "user": {"name": "cheeselee", "email": "robinlee.sysu@gmail.com", "id": 150, "avatar": "https://seccdn.libravatar.org/avatar/2480bd88bf66d2f3c4e20b36b2d76e40db49f4aa73fddba203bdeaf57214d91c?s=24&d=retro", "openid": "cheeselee.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "packager-zh"}, {"name": "deepinde-sig"}]}}}]}, {"bug_id": 1598872, "title": "dpkg installation fails due to lack of Requires(post)", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 831506, "bug_id": 1598872, "comment": {"karma": 0, "karma_critpath": 0, "text": "dpkg-deb --build $BUILD_DIR/package-name $BUILD_DIR/package-name.deb \ndpkg-deb: building package 'package-name' in '/build/package-name.deb'.\ntar: unrecognized option '--clamp-mtime'\nTry `tar --help' or `tar --usage' for more information.\ndpkg-deb: error: subprocess tar -cf returned error exit status 64\n\nI traced this down to a recent dpkg-deb change that seems to require a newer version of tar to use --build.  I confirmed this by building the latest tar, and the error went away.\n\nVersion That doesn't work:\ntar --version\ntar (GNU tar) 1.26\n\nWhen I built the following, everything worked:\ntar --version\ntar (GNU tar) 1.30\n\nFrom the docs, it looks like 1.28 is the required version\n\nCan we please update the spec to require 1.28.  Or roll back the change that requires this version?  ( RHEL/CentOS repos only make 1.26 available )", "timestamp": "2018-09-07 20:30:42", "update_id": 120032, "user_id": 207, "id": 831506, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 831654, "bug_id": 1598872, "comment": {"karma": 0, "karma_critpath": 0, "text": "Let's talk in https://bugzilla.redhat.com/show_bug.cgi?id=1626465", "timestamp": "2018-09-08 06:03:12", "update_id": 120032, "user_id": 150, "id": 831654, "testcase_feedback": [], "user": {"name": "cheeselee", "email": "robinlee.sysu@gmail.com", "id": 150, "avatar": "https://seccdn.libravatar.org/avatar/2480bd88bf66d2f3c4e20b36b2d76e40db49f4aa73fddba203bdeaf57214d91c?s=24&d=retro", "openid": "cheeselee.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "packager-zh"}, {"name": "deepinde-sig"}]}}}]}], "updateid": "FEDORA-2018-0a61e79f56", "karma": 1, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}