{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Security fix for CVE-2018-16843, CVE-2018-16844, CVE-2018-16845 + nginx rebase to 1.14.1.\n\n----\n\nNew version 1.14.1\n", "type": "security", "status": "stable", "request": null, "severity": "high", "suggest": "logout", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2018-11-20 23:55:40", "date_modified": null, "date_approved": null, "date_testing": "2018-11-21 05:10:14", "date_stable": "2018-11-24 02:26:39", "alias": "FEDORA-2018-7c540fdab4", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2018-11-24 02:26:39", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2018-7c540fdab4", "title": "nginx-1.14.1-2.fc29", "version_hash": "b6e926fe12a7b0e3699c5e29aa6df407293a9211", "release": {"name": "F29", "long_name": "Fedora 29", "version": "29", "id_prefix": "FEDORA", "branch": "f29", "dist_tag": "f29", "stable_tag": "f29-updates", "testing_tag": "f29-updates-testing", "candidate_tag": "f29-updates-candidate", "pending_signing_tag": "f29-signing-pending", "pending_testing_tag": "f29-updates-testing-pending", "pending_stable_tag": "f29-updates-pending", "override_tag": "f29-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "setting_status": null}, "user": {"name": "luhliarik", "email": "luhliari@redhat.com", "id": 959, "avatar": "https://seccdn.libravatar.org/avatar/8e63b107c1a61890dc2700ceb13a4fe83ebea194ae95cb89e656c660349e961d?s=24&d=retro", "openid": "luhliarik.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "modularity-wg"}, {"name": "trust admins"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by luhliarik. ", "timestamp": "2018-11-20 23:55:40", "update_id": 127124, "user_id": 91, "id": 865021, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [nginx-1.14.1-1.fc29](https://bodhi.fedoraproject.org/updates/FEDORA-2018-f3c7598d83), and has inherited its bugs and notes.", "timestamp": "2018-11-20 23:55:45", "update_id": 127124, "user_id": 91, "id": 865025, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2018-11-21 05:12:14", "update_id": 127124, "user_id": 91, "id": 865181, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "works as usual", "timestamp": "2018-11-21 05:18:04", "update_id": 127124, "user_id": 307, "id": 865185, "bug_feedback": [{"karma": 0, "comment_id": 865185, "bug_id": 1584426, "bug": {"bug_id": 1584426, "title": "Upstream Nginx 1.14.0 is now available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 865185, "bug_id": 1647255, "bug": {"bug_id": 1647255, "title": "CVE-2018-16845 nginx: Denial of service and memory disclosure via mp4 module [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 865185, "bug_id": 1647258, "bug": {"bug_id": 1647258, "title": "CVE-2018-16844 nginx: Excessive CPU usage via flaw in HTTP/2 implementation [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 865185, "bug_id": 1647259, "bug": {"bug_id": 1647259, "title": "CVE-2018-16843 nginx: Excessive memory consumption via flaw in HTTP/2 implementation [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "lnie", "email": "lnie@redhat.com", "id": 307, "avatar": "https://seccdn.libravatar.org/avatar/acbe3c6c54b2d720727e6819b615121b75b25d6bfc69f245d4dcf4921bf32ec7?s=24&d=retro", "openid": "lnie.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works as usual. ", "timestamp": "2018-11-22 18:09:02", "update_id": 127124, "user_id": 4535, "id": 865822, "bug_feedback": [{"karma": 0, "comment_id": 865822, "bug_id": 1584426, "bug": {"bug_id": 1584426, "title": "Upstream Nginx 1.14.0 is now available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 865822, "bug_id": 1647255, "bug": {"bug_id": 1647255, "title": "CVE-2018-16845 nginx: Denial of service and memory disclosure via mp4 module [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 865822, "bug_id": 1647258, "bug": {"bug_id": 1647258, "title": "CVE-2018-16844 nginx: Excessive CPU usage via flaw in HTTP/2 implementation [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 865822, "bug_id": 1647259, "bug": {"bug_id": 1647259, "title": "CVE-2018-16843 nginx: Excessive memory consumption via flaw in HTTP/2 implementation [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "davisclick", "email": "alvarez.davis@gmail.com", "id": 4535, "avatar": "https://seccdn.libravatar.org/avatar/baa185060b85e11df39498a324d44fa7d9110a3a25576b40d1502c4e97c27fc7?s=24&d=retro", "openid": "davisclick.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Looks good to me!", "timestamp": "2018-11-23 14:05:22", "update_id": 127124, "user_id": 1915, "id": 866133, "bug_feedback": [{"karma": 1, "comment_id": 866133, "bug_id": 1584426, "bug": {"bug_id": 1584426, "title": "Upstream Nginx 1.14.0 is now available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 866133, "bug_id": 1647255, "bug": {"bug_id": 1647255, "title": "CVE-2018-16845 nginx: Denial of service and memory disclosure via mp4 module [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 866133, "bug_id": 1647258, "bug": {"bug_id": 1647258, "title": "CVE-2018-16844 nginx: Excessive CPU usage via flaw in HTTP/2 implementation [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 866133, "bug_id": 1647259, "bug": {"bug_id": 1647259, "title": "CVE-2018-16843 nginx: Excessive memory consumption via flaw in HTTP/2 implementation [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "jdoss", "email": "joe@solidadmin.com", "id": 1915, "avatar": "https://seccdn.libravatar.org/avatar/2f69c16b493cf9bc5c44b55b1de9a1d770b36683438e42850c0d6135f749d5da?s=24&d=retro", "openid": "jdoss.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "wikiedit"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for batched by bodhi. ", "timestamp": "2018-11-23 14:05:23", "update_id": 127124, "user_id": 91, "id": 866134, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-11-23 14:06:07", "update_id": 127124, "user_id": 341, "id": 866135, "bug_feedback": [{"karma": 1, "comment_id": 866135, "bug_id": 1584426, "bug": {"bug_id": 1584426, "title": "Upstream Nginx 1.14.0 is now available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 866135, "bug_id": 1647255, "bug": {"bug_id": 1647255, "title": "CVE-2018-16845 nginx: Denial of service and memory disclosure via mp4 module [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 866135, "bug_id": 1647258, "bug": {"bug_id": 1647258, "title": "CVE-2018-16844 nginx: Excessive CPU usage via flaw in HTTP/2 implementation [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 866135, "bug_id": 1647259, "bug": {"bug_id": 1647259, "title": "CVE-2018-16843 nginx: Excessive memory consumption via flaw in HTTP/2 implementation [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "lbazan", "email": "bazanluis20@gmail.com", "id": 341, "avatar": "https://seccdn.libravatar.org/avatar/aa8c87b357978071b95fb822b289fd39afc1123c81a4a92d3fcb769ac481a66f?s=24&d=retro", "openid": "lbazan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "bodhiadmin"}, {"name": "fedora-mx"}, {"name": "signed_fpca"}, {"name": "gitfas"}, {"name": "campusambassadors"}, {"name": "fedora-ar"}, {"name": "l10n"}, {"name": "icaroproject"}, {"name": "ambassadors"}, {"name": "fedora-contributor"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "fedora-cl"}, {"name": "fedora-pa"}, {"name": "fedora-py"}, {"name": "cvsl10n"}, {"name": "triagers"}, {"name": "bzrpython-fedora"}, {"name": "fudcon"}, {"name": "ipausers"}, {"name": "fedora-ec"}, {"name": "advocates"}, {"name": "trust admins"}, {"name": "mindshare"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2018-11-23 23:45:52", "update_id": 127124, "user_id": 91, "id": 866253, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "I've tested it on several setups and it works fine. Thanks for the update.", "timestamp": "2018-11-24 00:17:57", "update_id": 127124, "user_id": 3428, "id": 866265, "bug_feedback": [{"karma": 1, "comment_id": 866265, "bug_id": 1584426, "bug": {"bug_id": 1584426, "title": "Upstream Nginx 1.14.0 is now available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 866265, "bug_id": 1647255, "bug": {"bug_id": 1647255, "title": "CVE-2018-16845 nginx: Denial of service and memory disclosure via mp4 module [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 866265, "bug_id": 1647258, "bug": {"bug_id": 1647258, "title": "CVE-2018-16844 nginx: Excessive CPU usage via flaw in HTTP/2 implementation [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 866265, "bug_id": 1647259, "bug": {"bug_id": 1647259, "title": "CVE-2018-16843 nginx: Excessive memory consumption via flaw in HTTP/2 implementation [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "sedrubal", "email": "fedora@sedrubal.de", "id": 3428, "avatar": "https://seccdn.libravatar.org/avatar/d37bae0ac7c0df5cdc9de4eabb6c07a7fbc8507f1202ce6aa5df279c3218f119?s=24&d=retro", "openid": "sedrubal.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2018-11-24 02:29:16", "update_id": 127124, "user_id": 91, "id": 866297, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "nginx-1.14.1-2.fc29", "signed": true, "release_id": 23, "type": "rpm", "epoch": 1}], "bugs": [{"bug_id": 1584426, "title": "Upstream Nginx 1.14.0 is now available", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 865185, "bug_id": 1584426, "comment": {"karma": 1, "karma_critpath": 0, "text": "works as usual", "timestamp": "2018-11-21 05:18:04", "update_id": 127124, "user_id": 307, "id": 865185, "testcase_feedback": [], "user": {"name": "lnie", "email": "lnie@redhat.com", "id": 307, "avatar": "https://seccdn.libravatar.org/avatar/acbe3c6c54b2d720727e6819b615121b75b25d6bfc69f245d4dcf4921bf32ec7?s=24&d=retro", "openid": "lnie.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 865822, "bug_id": 1584426, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works as usual. ", "timestamp": "2018-11-22 18:09:02", "update_id": 127124, "user_id": 4535, "id": 865822, "testcase_feedback": [], "user": {"name": "davisclick", "email": "alvarez.davis@gmail.com", "id": 4535, "avatar": "https://seccdn.libravatar.org/avatar/baa185060b85e11df39498a324d44fa7d9110a3a25576b40d1502c4e97c27fc7?s=24&d=retro", "openid": "davisclick.id.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 866133, "bug_id": 1584426, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks good to me!", "timestamp": "2018-11-23 14:05:22", "update_id": 127124, "user_id": 1915, "id": 866133, "testcase_feedback": [], "user": {"name": "jdoss", "email": "joe@solidadmin.com", "id": 1915, "avatar": "https://seccdn.libravatar.org/avatar/2f69c16b493cf9bc5c44b55b1de9a1d770b36683438e42850c0d6135f749d5da?s=24&d=retro", "openid": "jdoss.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "wikiedit"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 866135, "bug_id": 1584426, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-11-23 14:06:07", "update_id": 127124, "user_id": 341, "id": 866135, "testcase_feedback": [], "user": {"name": "lbazan", "email": "bazanluis20@gmail.com", "id": 341, "avatar": "https://seccdn.libravatar.org/avatar/aa8c87b357978071b95fb822b289fd39afc1123c81a4a92d3fcb769ac481a66f?s=24&d=retro", "openid": "lbazan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "bodhiadmin"}, {"name": "fedora-mx"}, {"name": "signed_fpca"}, {"name": "gitfas"}, {"name": "campusambassadors"}, {"name": "fedora-ar"}, {"name": "l10n"}, {"name": "icaroproject"}, {"name": "ambassadors"}, {"name": "fedora-contributor"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "fedora-cl"}, {"name": "fedora-pa"}, {"name": "fedora-py"}, {"name": "cvsl10n"}, {"name": "triagers"}, {"name": "bzrpython-fedora"}, {"name": "fudcon"}, {"name": "ipausers"}, {"name": "fedora-ec"}, {"name": "advocates"}, {"name": "trust admins"}, {"name": "mindshare"}]}}}, {"karma": 1, "comment_id": 866265, "bug_id": 1584426, "comment": {"karma": 1, "karma_critpath": 0, "text": "I've tested it on several setups and it works fine. Thanks for the update.", "timestamp": "2018-11-24 00:17:57", "update_id": 127124, "user_id": 3428, "id": 866265, "testcase_feedback": [], "user": {"name": "sedrubal", "email": "fedora@sedrubal.de", "id": 3428, "avatar": "https://seccdn.libravatar.org/avatar/d37bae0ac7c0df5cdc9de4eabb6c07a7fbc8507f1202ce6aa5df279c3218f119?s=24&d=retro", "openid": "sedrubal.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 872229, "bug_id": 1584426, "comment": {"karma": 0, "karma_critpath": 0, "text": "Newer upstream nginx 1.14.2 was released with Fedora-specific fix.  Changes include:\n\n    *) Bugfix: nginx could not be built by gcc 8.1.\n\n    *) Bugfix: nginx could not be built on Fedora 28 Linux.\n\n    *) Bugfix: in handling of client addresses when using unix domain listen\n       sockets to work with datagrams on Linux.\n\n    *) Change: the logging level of the \"http request\", \"https proxy\n       request\", \"unsupported protocol\", \"version too low\", \"no suitable key\n       share\", and \"no suitable signature algorithm\" SSL errors has been\n       lowered from \"crit\" to \"info\".\n\n    *) Bugfix: when using OpenSSL 1.1.0 or newer it was not possible to\n       switch off \"ssl_prefer_server_ciphers\" in a virtual server if it was\n       switched on in the default server.\n\n    *) Bugfix: nginx could not be built with LibreSSL 2.8.0.\n\n    *) Bugfix: if nginx was built with OpenSSL 1.1.0 and used with OpenSSL\n       1.1.1, the TLS 1.3 protocol was always enabled.\n\n    *) Bugfix: sending a disk-buffered request body to a gRPC backend might\n       fail.\n\n    *) Bugfix: connections with some gRPC backends might not be cached when\n       using the \"keepalive\" directive.\n\n    *) Bugfix: a segmentation fault might occur in a worker process if the\n       ngx_http_mp4_module was used on 32-bit platforms.", "timestamp": "2018-12-09 15:48:12", "update_id": 127125, "user_id": 207, "id": 872229, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 891020, "bug_id": 1584426, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2019-02-04 11:23:17", "update_id": 127125, "user_id": 4687, "id": 891020, "testcase_feedback": [], "user": {"name": "szydell", "email": "marcin@szydelscy.pl", "id": 4687, "avatar": "https://seccdn.libravatar.org/avatar/9550aee307be42e5a65758bfdc35dd57bfbd48b82cdc65eb028e69e487f6e3aa?s=24&d=retro", "openid": "szydell.id.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 891021, "bug_id": 1584426, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks ok.", "timestamp": "2019-02-04 11:27:29", "update_id": 127125, "user_id": 4687, "id": 891021, "testcase_feedback": [], "user": {"name": "szydell", "email": "marcin@szydelscy.pl", "id": 4687, "avatar": "https://seccdn.libravatar.org/avatar/9550aee307be42e5a65758bfdc35dd57bfbd48b82cdc65eb028e69e487f6e3aa?s=24&d=retro", "openid": "szydell.id.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1647255, "title": "CVE-2018-16845 nginx: Denial of service and memory disclosure via mp4 module [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 865185, "bug_id": 1647255, "comment": {"karma": 1, "karma_critpath": 0, "text": "works as usual", "timestamp": "2018-11-21 05:18:04", "update_id": 127124, "user_id": 307, "id": 865185, "testcase_feedback": [], "user": {"name": "lnie", "email": "lnie@redhat.com", "id": 307, "avatar": "https://seccdn.libravatar.org/avatar/acbe3c6c54b2d720727e6819b615121b75b25d6bfc69f245d4dcf4921bf32ec7?s=24&d=retro", "openid": "lnie.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 865822, "bug_id": 1647255, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works as usual. ", "timestamp": "2018-11-22 18:09:02", "update_id": 127124, "user_id": 4535, "id": 865822, "testcase_feedback": [], "user": {"name": "davisclick", "email": "alvarez.davis@gmail.com", "id": 4535, "avatar": "https://seccdn.libravatar.org/avatar/baa185060b85e11df39498a324d44fa7d9110a3a25576b40d1502c4e97c27fc7?s=24&d=retro", "openid": "davisclick.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 866133, "bug_id": 1647255, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks good to me!", "timestamp": "2018-11-23 14:05:22", "update_id": 127124, "user_id": 1915, "id": 866133, "testcase_feedback": [], "user": {"name": "jdoss", "email": "joe@solidadmin.com", "id": 1915, "avatar": "https://seccdn.libravatar.org/avatar/2f69c16b493cf9bc5c44b55b1de9a1d770b36683438e42850c0d6135f749d5da?s=24&d=retro", "openid": "jdoss.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "wikiedit"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 866135, "bug_id": 1647255, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-11-23 14:06:07", "update_id": 127124, "user_id": 341, "id": 866135, "testcase_feedback": [], "user": {"name": "lbazan", "email": "bazanluis20@gmail.com", "id": 341, "avatar": "https://seccdn.libravatar.org/avatar/aa8c87b357978071b95fb822b289fd39afc1123c81a4a92d3fcb769ac481a66f?s=24&d=retro", "openid": "lbazan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "bodhiadmin"}, {"name": "fedora-mx"}, {"name": "signed_fpca"}, {"name": "gitfas"}, {"name": "campusambassadors"}, {"name": "fedora-ar"}, {"name": "l10n"}, {"name": "icaroproject"}, {"name": "ambassadors"}, {"name": "fedora-contributor"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "fedora-cl"}, {"name": "fedora-pa"}, {"name": "fedora-py"}, {"name": "cvsl10n"}, {"name": "triagers"}, {"name": "bzrpython-fedora"}, {"name": "fudcon"}, {"name": "ipausers"}, {"name": "fedora-ec"}, {"name": "advocates"}, {"name": "trust admins"}, {"name": "mindshare"}]}}}, {"karma": 0, "comment_id": 866265, "bug_id": 1647255, "comment": {"karma": 1, "karma_critpath": 0, "text": "I've tested it on several setups and it works fine. Thanks for the update.", "timestamp": "2018-11-24 00:17:57", "update_id": 127124, "user_id": 3428, "id": 866265, "testcase_feedback": [], "user": {"name": "sedrubal", "email": "fedora@sedrubal.de", "id": 3428, "avatar": "https://seccdn.libravatar.org/avatar/d37bae0ac7c0df5cdc9de4eabb6c07a7fbc8507f1202ce6aa5df279c3218f119?s=24&d=retro", "openid": "sedrubal.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 872229, "bug_id": 1647255, "comment": {"karma": 0, "karma_critpath": 0, "text": "Newer upstream nginx 1.14.2 was released with Fedora-specific fix.  Changes include:\n\n    *) Bugfix: nginx could not be built by gcc 8.1.\n\n    *) Bugfix: nginx could not be built on Fedora 28 Linux.\n\n    *) Bugfix: in handling of client addresses when using unix domain listen\n       sockets to work with datagrams on Linux.\n\n    *) Change: the logging level of the \"http request\", \"https proxy\n       request\", \"unsupported protocol\", \"version too low\", \"no suitable key\n       share\", and \"no suitable signature algorithm\" SSL errors has been\n       lowered from \"crit\" to \"info\".\n\n    *) Bugfix: when using OpenSSL 1.1.0 or newer it was not possible to\n       switch off \"ssl_prefer_server_ciphers\" in a virtual server if it was\n       switched on in the default server.\n\n    *) Bugfix: nginx could not be built with LibreSSL 2.8.0.\n\n    *) Bugfix: if nginx was built with OpenSSL 1.1.0 and used with OpenSSL\n       1.1.1, the TLS 1.3 protocol was always enabled.\n\n    *) Bugfix: sending a disk-buffered request body to a gRPC backend might\n       fail.\n\n    *) Bugfix: connections with some gRPC backends might not be cached when\n       using the \"keepalive\" directive.\n\n    *) Bugfix: a segmentation fault might occur in a worker process if the\n       ngx_http_mp4_module was used on 32-bit platforms.", "timestamp": "2018-12-09 15:48:12", "update_id": 127125, "user_id": 207, "id": 872229, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 891020, "bug_id": 1647255, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2019-02-04 11:23:17", "update_id": 127125, "user_id": 4687, "id": 891020, "testcase_feedback": [], "user": {"name": "szydell", "email": "marcin@szydelscy.pl", "id": 4687, "avatar": "https://seccdn.libravatar.org/avatar/9550aee307be42e5a65758bfdc35dd57bfbd48b82cdc65eb028e69e487f6e3aa?s=24&d=retro", "openid": "szydell.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 891021, "bug_id": 1647255, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks ok.", "timestamp": "2019-02-04 11:27:29", "update_id": 127125, "user_id": 4687, "id": 891021, "testcase_feedback": [], "user": {"name": "szydell", "email": "marcin@szydelscy.pl", "id": 4687, "avatar": "https://seccdn.libravatar.org/avatar/9550aee307be42e5a65758bfdc35dd57bfbd48b82cdc65eb028e69e487f6e3aa?s=24&d=retro", "openid": "szydell.id.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1647258, "title": "CVE-2018-16844 nginx: Excessive CPU usage via flaw in HTTP/2 implementation [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 865185, "bug_id": 1647258, "comment": {"karma": 1, "karma_critpath": 0, "text": "works as usual", "timestamp": "2018-11-21 05:18:04", "update_id": 127124, "user_id": 307, "id": 865185, "testcase_feedback": [], "user": {"name": "lnie", "email": "lnie@redhat.com", "id": 307, "avatar": "https://seccdn.libravatar.org/avatar/acbe3c6c54b2d720727e6819b615121b75b25d6bfc69f245d4dcf4921bf32ec7?s=24&d=retro", "openid": "lnie.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 865822, "bug_id": 1647258, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works as usual. ", "timestamp": "2018-11-22 18:09:02", "update_id": 127124, "user_id": 4535, "id": 865822, "testcase_feedback": [], "user": {"name": "davisclick", "email": "alvarez.davis@gmail.com", "id": 4535, "avatar": "https://seccdn.libravatar.org/avatar/baa185060b85e11df39498a324d44fa7d9110a3a25576b40d1502c4e97c27fc7?s=24&d=retro", "openid": "davisclick.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 866133, "bug_id": 1647258, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks good to me!", "timestamp": "2018-11-23 14:05:22", "update_id": 127124, "user_id": 1915, "id": 866133, "testcase_feedback": [], "user": {"name": "jdoss", "email": "joe@solidadmin.com", "id": 1915, "avatar": "https://seccdn.libravatar.org/avatar/2f69c16b493cf9bc5c44b55b1de9a1d770b36683438e42850c0d6135f749d5da?s=24&d=retro", "openid": "jdoss.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "wikiedit"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 866135, "bug_id": 1647258, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-11-23 14:06:07", "update_id": 127124, "user_id": 341, "id": 866135, "testcase_feedback": [], "user": {"name": "lbazan", "email": "bazanluis20@gmail.com", "id": 341, "avatar": "https://seccdn.libravatar.org/avatar/aa8c87b357978071b95fb822b289fd39afc1123c81a4a92d3fcb769ac481a66f?s=24&d=retro", "openid": "lbazan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "bodhiadmin"}, {"name": "fedora-mx"}, {"name": "signed_fpca"}, {"name": "gitfas"}, {"name": "campusambassadors"}, {"name": "fedora-ar"}, {"name": "l10n"}, {"name": "icaroproject"}, {"name": "ambassadors"}, {"name": "fedora-contributor"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "fedora-cl"}, {"name": "fedora-pa"}, {"name": "fedora-py"}, {"name": "cvsl10n"}, {"name": "triagers"}, {"name": "bzrpython-fedora"}, {"name": "fudcon"}, {"name": "ipausers"}, {"name": "fedora-ec"}, {"name": "advocates"}, {"name": "trust admins"}, {"name": "mindshare"}]}}}, {"karma": 0, "comment_id": 866265, "bug_id": 1647258, "comment": {"karma": 1, "karma_critpath": 0, "text": "I've tested it on several setups and it works fine. Thanks for the update.", "timestamp": "2018-11-24 00:17:57", "update_id": 127124, "user_id": 3428, "id": 866265, "testcase_feedback": [], "user": {"name": "sedrubal", "email": "fedora@sedrubal.de", "id": 3428, "avatar": "https://seccdn.libravatar.org/avatar/d37bae0ac7c0df5cdc9de4eabb6c07a7fbc8507f1202ce6aa5df279c3218f119?s=24&d=retro", "openid": "sedrubal.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 872229, "bug_id": 1647258, "comment": {"karma": 0, "karma_critpath": 0, "text": "Newer upstream nginx 1.14.2 was released with Fedora-specific fix.  Changes include:\n\n    *) Bugfix: nginx could not be built by gcc 8.1.\n\n    *) Bugfix: nginx could not be built on Fedora 28 Linux.\n\n    *) Bugfix: in handling of client addresses when using unix domain listen\n       sockets to work with datagrams on Linux.\n\n    *) Change: the logging level of the \"http request\", \"https proxy\n       request\", \"unsupported protocol\", \"version too low\", \"no suitable key\n       share\", and \"no suitable signature algorithm\" SSL errors has been\n       lowered from \"crit\" to \"info\".\n\n    *) Bugfix: when using OpenSSL 1.1.0 or newer it was not possible to\n       switch off \"ssl_prefer_server_ciphers\" in a virtual server if it was\n       switched on in the default server.\n\n    *) Bugfix: nginx could not be built with LibreSSL 2.8.0.\n\n    *) Bugfix: if nginx was built with OpenSSL 1.1.0 and used with OpenSSL\n       1.1.1, the TLS 1.3 protocol was always enabled.\n\n    *) Bugfix: sending a disk-buffered request body to a gRPC backend might\n       fail.\n\n    *) Bugfix: connections with some gRPC backends might not be cached when\n       using the \"keepalive\" directive.\n\n    *) Bugfix: a segmentation fault might occur in a worker process if the\n       ngx_http_mp4_module was used on 32-bit platforms.", "timestamp": "2018-12-09 15:48:12", "update_id": 127125, "user_id": 207, "id": 872229, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 891020, "bug_id": 1647258, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2019-02-04 11:23:17", "update_id": 127125, "user_id": 4687, "id": 891020, "testcase_feedback": [], "user": {"name": "szydell", "email": "marcin@szydelscy.pl", "id": 4687, "avatar": "https://seccdn.libravatar.org/avatar/9550aee307be42e5a65758bfdc35dd57bfbd48b82cdc65eb028e69e487f6e3aa?s=24&d=retro", "openid": "szydell.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 891021, "bug_id": 1647258, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks ok.", "timestamp": "2019-02-04 11:27:29", "update_id": 127125, "user_id": 4687, "id": 891021, "testcase_feedback": [], "user": {"name": "szydell", "email": "marcin@szydelscy.pl", "id": 4687, "avatar": "https://seccdn.libravatar.org/avatar/9550aee307be42e5a65758bfdc35dd57bfbd48b82cdc65eb028e69e487f6e3aa?s=24&d=retro", "openid": "szydell.id.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1647259, "title": "CVE-2018-16843 nginx: Excessive memory consumption via flaw in HTTP/2 implementation [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 865185, "bug_id": 1647259, "comment": {"karma": 1, "karma_critpath": 0, "text": "works as usual", "timestamp": "2018-11-21 05:18:04", "update_id": 127124, "user_id": 307, "id": 865185, "testcase_feedback": [], "user": {"name": "lnie", "email": "lnie@redhat.com", "id": 307, "avatar": "https://seccdn.libravatar.org/avatar/acbe3c6c54b2d720727e6819b615121b75b25d6bfc69f245d4dcf4921bf32ec7?s=24&d=retro", "openid": "lnie.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 865822, "bug_id": 1647259, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works as usual. ", "timestamp": "2018-11-22 18:09:02", "update_id": 127124, "user_id": 4535, "id": 865822, "testcase_feedback": [], "user": {"name": "davisclick", "email": "alvarez.davis@gmail.com", "id": 4535, "avatar": "https://seccdn.libravatar.org/avatar/baa185060b85e11df39498a324d44fa7d9110a3a25576b40d1502c4e97c27fc7?s=24&d=retro", "openid": "davisclick.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 866133, "bug_id": 1647259, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks good to me!", "timestamp": "2018-11-23 14:05:22", "update_id": 127124, "user_id": 1915, "id": 866133, "testcase_feedback": [], "user": {"name": "jdoss", "email": "joe@solidadmin.com", "id": 1915, "avatar": "https://seccdn.libravatar.org/avatar/2f69c16b493cf9bc5c44b55b1de9a1d770b36683438e42850c0d6135f749d5da?s=24&d=retro", "openid": "jdoss.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "wikiedit"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 866135, "bug_id": 1647259, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-11-23 14:06:07", "update_id": 127124, "user_id": 341, "id": 866135, "testcase_feedback": [], "user": {"name": "lbazan", "email": "bazanluis20@gmail.com", "id": 341, "avatar": "https://seccdn.libravatar.org/avatar/aa8c87b357978071b95fb822b289fd39afc1123c81a4a92d3fcb769ac481a66f?s=24&d=retro", "openid": "lbazan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "bodhiadmin"}, {"name": "fedora-mx"}, {"name": "signed_fpca"}, {"name": "gitfas"}, {"name": "campusambassadors"}, {"name": "fedora-ar"}, {"name": "l10n"}, {"name": "icaroproject"}, {"name": "ambassadors"}, {"name": "fedora-contributor"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "fedora-cl"}, {"name": "fedora-pa"}, {"name": "fedora-py"}, {"name": "cvsl10n"}, {"name": "triagers"}, {"name": "bzrpython-fedora"}, {"name": "fudcon"}, {"name": "ipausers"}, {"name": "fedora-ec"}, {"name": "advocates"}, {"name": "trust admins"}, {"name": "mindshare"}]}}}, {"karma": 0, "comment_id": 866265, "bug_id": 1647259, "comment": {"karma": 1, "karma_critpath": 0, "text": "I've tested it on several setups and it works fine. Thanks for the update.", "timestamp": "2018-11-24 00:17:57", "update_id": 127124, "user_id": 3428, "id": 866265, "testcase_feedback": [], "user": {"name": "sedrubal", "email": "fedora@sedrubal.de", "id": 3428, "avatar": "https://seccdn.libravatar.org/avatar/d37bae0ac7c0df5cdc9de4eabb6c07a7fbc8507f1202ce6aa5df279c3218f119?s=24&d=retro", "openid": "sedrubal.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 872229, "bug_id": 1647259, "comment": {"karma": 0, "karma_critpath": 0, "text": "Newer upstream nginx 1.14.2 was released with Fedora-specific fix.  Changes include:\n\n    *) Bugfix: nginx could not be built by gcc 8.1.\n\n    *) Bugfix: nginx could not be built on Fedora 28 Linux.\n\n    *) Bugfix: in handling of client addresses when using unix domain listen\n       sockets to work with datagrams on Linux.\n\n    *) Change: the logging level of the \"http request\", \"https proxy\n       request\", \"unsupported protocol\", \"version too low\", \"no suitable key\n       share\", and \"no suitable signature algorithm\" SSL errors has been\n       lowered from \"crit\" to \"info\".\n\n    *) Bugfix: when using OpenSSL 1.1.0 or newer it was not possible to\n       switch off \"ssl_prefer_server_ciphers\" in a virtual server if it was\n       switched on in the default server.\n\n    *) Bugfix: nginx could not be built with LibreSSL 2.8.0.\n\n    *) Bugfix: if nginx was built with OpenSSL 1.1.0 and used with OpenSSL\n       1.1.1, the TLS 1.3 protocol was always enabled.\n\n    *) Bugfix: sending a disk-buffered request body to a gRPC backend might\n       fail.\n\n    *) Bugfix: connections with some gRPC backends might not be cached when\n       using the \"keepalive\" directive.\n\n    *) Bugfix: a segmentation fault might occur in a worker process if the\n       ngx_http_mp4_module was used on 32-bit platforms.", "timestamp": "2018-12-09 15:48:12", "update_id": 127125, "user_id": 207, "id": 872229, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 891020, "bug_id": 1647259, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2019-02-04 11:23:17", "update_id": 127125, "user_id": 4687, "id": 891020, "testcase_feedback": [], "user": {"name": "szydell", "email": "marcin@szydelscy.pl", "id": 4687, "avatar": "https://seccdn.libravatar.org/avatar/9550aee307be42e5a65758bfdc35dd57bfbd48b82cdc65eb028e69e487f6e3aa?s=24&d=retro", "openid": "szydell.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 891021, "bug_id": 1647259, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks ok.", "timestamp": "2019-02-04 11:27:29", "update_id": 127125, "user_id": 4687, "id": 891021, "testcase_feedback": [], "user": {"name": "szydell", "email": "marcin@szydelscy.pl", "id": 4687, "avatar": "https://seccdn.libravatar.org/avatar/9550aee307be42e5a65758bfdc35dd57bfbd48b82cdc65eb028e69e487f6e3aa?s=24&d=retro", "openid": "szydell.id.fedoraproject.org", "groups": []}}}]}], "updateid": "FEDORA-2018-7c540fdab4", "karma": 5, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}