{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "- Update to 4.1.5\n\nRelease notes:  https://blog.powerdns.com/2018/11/06/powerdns-authoritative-server-4-0-6-4-1-5-and-recursor-4-0-9-4-1-5-released/\n\nPowerDNS Security Advisory 2018-03 (https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2018-03.html) (CVE-2018-10851)\n\nPowerDNS Security Advisory 2018-05 (https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2018-05.html) (CVE-2018-14626)\n\n", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2018-11-07 01:00:20", "date_modified": "2018-11-12 18:54:08", "date_approved": null, "date_testing": "2018-11-08 03:39:50", "date_stable": "2018-11-16 03:41:37", "alias": "FEDORA-2018-5a1e2759aa", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2018-11-16 03:41:37", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a1e2759aa", "title": "pdns-4.1.5-1.fc27", "version_hash": "269f1791d6d4a2dbe0f611482525dff33f39d1ff", "release": {"name": "F27", "long_name": "Fedora 27", "version": "27", "id_prefix": "FEDORA", "branch": "f27", "dist_tag": "f27", "stable_tag": "f27-updates", "testing_tag": "f27-updates-testing", "candidate_tag": "f27-updates-candidate", "pending_signing_tag": "f27-signing-pending", "pending_testing_tag": "f27-updates-testing-pending", "pending_stable_tag": "f27-updates-pending", "override_tag": "f27-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "mstevens", "email": "ms@unix9.com", "id": 203, "avatar": "https://seccdn.libravatar.org/avatar/66cdd58f5ace3c9703b685ce40fdb67023b566459b5d44a8768d0cb55407bd1c?s=24&d=retro", "openid": "mstevens.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by mstevens. ", "timestamp": "2018-11-07 01:00:20", "update_id": 126200, "user_id": 91, "id": 858204, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2018-11-08 03:40:15", "update_id": 126200, "user_id": 91, "id": 858913, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "mstevens edited this update.", "timestamp": "2018-11-09 15:46:33", "update_id": 126200, "user_id": 91, "id": 859653, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "mstevens edited this update.", "timestamp": "2018-11-12 18:54:00", "update_id": 126200, "user_id": 91, "id": 861025, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2018-11-15 06:00:23", "update_id": 126200, "user_id": 91, "id": 862650, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for batched by mstevens. ", "timestamp": "2018-11-15 08:49:55", "update_id": 126200, "user_id": 91, "id": 862761, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2018-11-15 23:45:35", "update_id": 126200, "user_id": 91, "id": 862956, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2018-11-16 03:41:56", "update_id": 126200, "user_id": 91, "id": 863021, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "pdns-4.1.5-1.fc27", "signed": true, "release_id": 17, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1588185, "title": "CVE-2018-10851 pdns: Memory leak while parsing malformed records", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 868523, "bug_id": 1588185, "comment": {"karma": 0, "karma_critpath": 0, "text": "Why was this major release update pushed to EPEL 7 and marked as security update?\n\nUpgrading from PDNS 3.4.11-4.el7.x86_64 to 4.0.6-2.el7.x86_64 is more then just a security update. This broke our entire PDNS cluster this morning cause config parameters have changed and PDNS wasn't starting anymore. Also the Web API has changed. \n\nWe're running yum-cron to apply security patches automatically but this showed us to remove it from all systems. I really appreciate your work guys but this wasn't really cautious.", "timestamp": "2018-11-29 14:20:00", "update_id": 126405, "user_id": 3398, "id": 868523, "testcase_feedback": [], "user": {"name": "tyrola", "email": "alex.birkner@gmail.com", "id": 3398, "avatar": "https://seccdn.libravatar.org/avatar/0066c760e117e4fadc698dbc51289ff47f3865eebd6d53ce273d97fd250eef34?s=24&d=retro", "openid": "tyrola.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 869867, "bug_id": 1588185, "comment": {"karma": 0, "karma_critpath": 0, "text": "@tyrola\nThanks for your feedback. It is a security update for https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2018-03.html (CVE-2018-10851). \n\nPlease let me explain a few things:  RHEL7 will be supported until June 30, 2024. We can't support PowerDNS 3.4.x until 2024, because PowerDNS 3.4.x is now EOL (End of Life).  Please check the End of life statement from upstream developer: https://doc.powerdns.com/authoritative/appendices/EOL.html\n\nThat's the reason why we must upgrade to PowerDNS 4.x. Since there is no SQL schema change between 3.4.x and 4.0.x the upgrade should work properly in most situations with mysql or psql backend. I am sorry that you had problems. Please note: The API was considered experimental in all 3.x releases.", "timestamp": "2018-12-03 14:20:23", "update_id": 126405, "user_id": 203, "id": 869867, "testcase_feedback": [], "user": {"name": "mstevens", "email": "ms@unix9.com", "id": 203, "avatar": "https://seccdn.libravatar.org/avatar/66cdd58f5ace3c9703b685ce40fdb67023b566459b5d44a8768d0cb55407bd1c?s=24&d=retro", "openid": "mstevens.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 1649028, "title": "CVE-2018-14626 pdns: Packet cache pollution via crafted query", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 868523, "bug_id": 1649028, "comment": {"karma": 0, "karma_critpath": 0, "text": "Why was this major release update pushed to EPEL 7 and marked as security update?\n\nUpgrading from PDNS 3.4.11-4.el7.x86_64 to 4.0.6-2.el7.x86_64 is more then just a security update. This broke our entire PDNS cluster this morning cause config parameters have changed and PDNS wasn't starting anymore. Also the Web API has changed. \n\nWe're running yum-cron to apply security patches automatically but this showed us to remove it from all systems. I really appreciate your work guys but this wasn't really cautious.", "timestamp": "2018-11-29 14:20:00", "update_id": 126405, "user_id": 3398, "id": 868523, "testcase_feedback": [], "user": {"name": "tyrola", "email": "alex.birkner@gmail.com", "id": 3398, "avatar": "https://seccdn.libravatar.org/avatar/0066c760e117e4fadc698dbc51289ff47f3865eebd6d53ce273d97fd250eef34?s=24&d=retro", "openid": "tyrola.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 869867, "bug_id": 1649028, "comment": {"karma": 0, "karma_critpath": 0, "text": "@tyrola\nThanks for your feedback. It is a security update for https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2018-03.html (CVE-2018-10851). \n\nPlease let me explain a few things:  RHEL7 will be supported until June 30, 2024. We can't support PowerDNS 3.4.x until 2024, because PowerDNS 3.4.x is now EOL (End of Life).  Please check the End of life statement from upstream developer: https://doc.powerdns.com/authoritative/appendices/EOL.html\n\nThat's the reason why we must upgrade to PowerDNS 4.x. Since there is no SQL schema change between 3.4.x and 4.0.x the upgrade should work properly in most situations with mysql or psql backend. I am sorry that you had problems. Please note: The API was considered experimental in all 3.x releases.", "timestamp": "2018-12-03 14:20:23", "update_id": 126405, "user_id": 203, "id": 869867, "testcase_feedback": [], "user": {"name": "mstevens", "email": "ms@unix9.com", "id": 203, "avatar": "https://seccdn.libravatar.org/avatar/66cdd58f5ace3c9703b685ce40fdb67023b566459b5d44a8768d0cb55407bd1c?s=24&d=retro", "openid": "mstevens.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 1649029, "title": "CVE-2018-14626 pdns: Packet cache pollution via crafted query [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1649042, "title": "CVE-2018-10851: pdns: Memory leak while parsing malformed records [fedora-all]", "security": true, "parent": false, "feedback": []}], "updateid": "FEDORA-2018-5a1e2759aa", "karma": 0, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}