{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Resolves: #1715758 - CVE-2019-9946", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2019-06-03 12:41:44", "date_modified": null, "date_approved": null, "date_testing": "2019-06-04 03:27:10", "date_stable": "2019-06-15 01:20:44", "alias": "FEDORA-2019-24217abfdf", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2019-06-15 01:20:44", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2019-24217abfdf", "title": "containernetworking-plugins-0.7.5-1.fc29", "version_hash": "e48103ec36fb3c808149a60124dca9643f6794c6", "release": {"name": "F29", "long_name": "Fedora 29", "version": "29", "id_prefix": "FEDORA", "branch": "f29", "dist_tag": "f29", "stable_tag": "f29-updates", "testing_tag": "f29-updates-testing", "candidate_tag": "f29-updates-candidate", "pending_signing_tag": "f29-signing-pending", "pending_testing_tag": "f29-updates-testing-pending", "pending_stable_tag": "f29-updates-pending", "override_tag": "f29-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "lsm5", "email": "lsm5@redhat.com", "id": 228, "avatar": "https://seccdn.libravatar.org/avatar/05bd0d0810e225c716eba3290a5596c557d1ea3e4e2b0cf0de8e62a925927b5c?s=24&d=retro", "openid": "lsm5.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "container-sig"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by lsm5. ", "timestamp": "2019-06-03 12:41:45", "update_id": 140484, "user_id": 91, "id": 954418, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update test gating status has been changed to 'waiting'.", "timestamp": "2019-06-03 12:41:45", "update_id": 140484, "user_id": 91, "id": 954419, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update test gating status has been changed to 'ignored'.", "timestamp": "2019-06-03 12:41:49", "update_id": 140484, "user_id": 91, "id": 954420, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2019-06-04 03:28:06", "update_id": 140484, "user_id": 91, "id": 954809, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2019-06-11 06:00:34", "update_id": 140484, "user_id": 91, "id": 958128, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Needed by podman-1.4.0, and works with the Silverblue toolbox.", "timestamp": "2019-06-14 13:57:26", "update_id": 140484, "user_id": 431, "id": 959957, "bug_feedback": [{"karma": 0, "comment_id": 959957, "bug_id": 1715758, "bug": {"bug_id": 1715758, "title": "CVE-2019-9946 containernetworking-plugins: kubernetes: Incorrect rule injection in CNI portmap plugin [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "rishi", "email": "debarshir@redhat.com", "id": 431, "avatar": "https://seccdn.libravatar.org/avatar/7669f8f548ae4c5084a75d10d2fff6fa3e883c8c91cb26f727ab8118b8372884?s=24&d=retro", "openid": "rishi.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "gnome-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "go-sig"}, {"name": "ai-ml-sig"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Podman networking working fine over here", "timestamp": "2019-06-14 14:17:42", "update_id": 140484, "user_id": 4160, "id": 959967, "bug_feedback": [{"karma": 1, "comment_id": 959967, "bug_id": 1715758, "bug": {"bug_id": 1715758, "title": "CVE-2019-9946 containernetworking-plugins: kubernetes: Incorrect rule injection in CNI portmap plugin [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "mheon", "email": "mheon@redhat.com", "id": 4160, "avatar": "https://seccdn.libravatar.org/avatar/4d72456c0f8486ad75135502a29ca4a4cfb8b8faa26ef14f372e8f408fc4824f?s=24&d=retro", "openid": "mheon.id.fedoraproject.org", "groups": [{"name": "packager"}]}}, {"karma": 1, "karma_critpath": 0, "text": "WFM", "timestamp": "2019-06-14 14:43:32", "update_id": 140484, "user_id": 1643, "id": 959971, "bug_feedback": [{"karma": 0, "comment_id": 959971, "bug_id": 1715758, "bug": {"bug_id": 1715758, "title": "CVE-2019-9946 containernetworking-plugins: kubernetes: Incorrect rule injection in CNI portmap plugin [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "dwalsh", "email": "dwalsh@redhat.com", "id": 1643, "avatar": "https://seccdn.libravatar.org/avatar/1c5e583ab8b950eb480915ed4b094dd68fe4e57e7f46a031473ae383bf4d5495?s=24&d=retro", "openid": "dwalsh.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "summer-coding"}, {"name": "container-sig"}, {"name": "cla_redhat"}, {"name": "hgsetroubleshoot"}, {"name": "gitsetroubleshoot"}, {"name": "cvspolicycoreutils"}, {"name": "gitsystem-config-selinux"}, {"name": "gitselinux-policy"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2019-06-14 14:43:33", "update_id": 140484, "user_id": 91, "id": 959972, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2019-06-15 01:21:17", "update_id": 140484, "user_id": 91, "id": 960070, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "containernetworking-plugins-0.7.5-1.fc29", "signed": true, "release_id": 23, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1715758, "title": "CVE-2019-9946 containernetworking-plugins: kubernetes: Incorrect rule injection in CNI portmap plugin [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 958280, "bug_id": 1715758, "comment": {"karma": 1, "karma_critpath": 0, "text": "Tested these together:\n\n* containernetworking-plugins-0.7.5-1.fc30.x86_64\n* podman-2:1.4.0-1.fc30.x86_64\n\nWFM", "timestamp": "2019-06-11 09:02:38", "update_id": 140483, "user_id": 4962, "id": 958280, "testcase_feedback": [], "user": {"name": "jistr", "email": "jistr@redhat.com", "id": 4962, "avatar": "https://seccdn.libravatar.org/avatar/48311aaba20960b942d5bb55d3ef8748ce4b62b19818dbc52850792d758050db?s=24&d=retro", "openid": "jistr.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 958795, "bug_id": 1715758, "comment": {"karma": 0, "karma_critpath": 0, "text": "Hmpfs, podman should be shipped in one update with containernetworking-plugins;  the result is that F30 repos are now broken because podman landed F30 prematurely:\n```\n Problem 1: cannot install the best update candidate for package podman-2:1.3.1-1.git7210727.fc30.x86_64\n  - problem with installed package podman-2:1.3.1-1.git7210727.fc30.x86_64\n  - nothing provides containernetworking-plugins >= 0.7.5-1 needed by podman-2:1.4.0-1.fc30.x86_64\n```", "timestamp": "2019-06-12 07:27:19", "update_id": 140483, "user_id": 827, "id": 958795, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 958796, "bug_id": 1715758, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2019-06-12 07:27:39", "update_id": 140483, "user_id": 827, "id": 958796, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 958800, "bug_id": 1715758, "comment": {"karma": 1, "karma_critpath": 0, "text": "Tested with cockpit-podman, together with [podman 1.4](https://bodhi.fedoraproject.org/updates/FEDORA-2019-886b4d2fb6), works fine.", "timestamp": "2019-06-12 07:32:20", "update_id": 140483, "user_id": 3506, "id": 958800, "testcase_feedback": [], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}]}}}, {"karma": 0, "comment_id": 959957, "bug_id": 1715758, "comment": {"karma": 1, "karma_critpath": 0, "text": "Needed by podman-1.4.0, and works with the Silverblue toolbox.", "timestamp": "2019-06-14 13:57:26", "update_id": 140484, "user_id": 431, "id": 959957, "testcase_feedback": [], "user": {"name": "rishi", "email": "debarshir@redhat.com", "id": 431, "avatar": "https://seccdn.libravatar.org/avatar/7669f8f548ae4c5084a75d10d2fff6fa3e883c8c91cb26f727ab8118b8372884?s=24&d=retro", "openid": "rishi.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "gnome-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "go-sig"}, {"name": "ai-ml-sig"}]}}}, {"karma": 1, "comment_id": 959967, "bug_id": 1715758, "comment": {"karma": 1, "karma_critpath": 0, "text": "Podman networking working fine over here", "timestamp": "2019-06-14 14:17:42", "update_id": 140484, "user_id": 4160, "id": 959967, "testcase_feedback": [], "user": {"name": "mheon", "email": "mheon@redhat.com", "id": 4160, "avatar": "https://seccdn.libravatar.org/avatar/4d72456c0f8486ad75135502a29ca4a4cfb8b8faa26ef14f372e8f408fc4824f?s=24&d=retro", "openid": "mheon.id.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 0, "comment_id": 959971, "bug_id": 1715758, "comment": {"karma": 1, "karma_critpath": 0, "text": "WFM", "timestamp": "2019-06-14 14:43:32", "update_id": 140484, "user_id": 1643, "id": 959971, "testcase_feedback": [], "user": {"name": "dwalsh", "email": "dwalsh@redhat.com", "id": 1643, "avatar": "https://seccdn.libravatar.org/avatar/1c5e583ab8b950eb480915ed4b094dd68fe4e57e7f46a031473ae383bf4d5495?s=24&d=retro", "openid": "dwalsh.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "summer-coding"}, {"name": "container-sig"}, {"name": "cla_redhat"}, {"name": "hgsetroubleshoot"}, {"name": "gitsetroubleshoot"}, {"name": "cvspolicycoreutils"}, {"name": "gitsystem-config-selinux"}, {"name": "gitselinux-policy"}]}}}]}], "updateid": "FEDORA-2019-24217abfdf", "karma": 3, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}