{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Security fix for CVE-2018-16868", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": null, "close_bugs": true, "date_submitted": "2019-01-02 12:56:59", "date_modified": null, "date_approved": null, "date_testing": "2019-01-03 04:00:09", "date_stable": "2019-01-11 00:16:18", "alias": "FEDORA-2019-24dc022a51", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2019-01-11 00:16:18", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2019-24dc022a51", "title": "gnutls-3.6.5-1.fc28", "version_hash": "81e1907058886c65bb80a28b62dce3e70584e76f", "release": {"name": "F28", "long_name": "Fedora 28", "version": "28", "id_prefix": "FEDORA", "branch": "f28", "dist_tag": "f28", "stable_tag": "f28-updates", "testing_tag": "f28-updates-testing", "candidate_tag": "f28-updates-candidate", "pending_signing_tag": "f28-signing-pending", "pending_testing_tag": "f28-updates-testing-pending", "pending_stable_tag": "f28-updates-pending", "override_tag": "f28-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "setting_status": null}, "user": {"name": "ansasaki", "email": "ansasaki@redhat.com", "id": 4145, "avatar": "https://seccdn.libravatar.org/avatar/df26bab8cb0162234d39d2c93e959dd442ec9db4f872a4deb9f8ad326497df5a?s=24&d=retro", "openid": "ansasaki.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by ansasaki. ", "timestamp": "2019-01-02 12:56:59", "update_id": 129304, "user_id": 91, "id": 880652, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2019-01-03 04:00:47", "update_id": 129304, "user_id": 91, "id": 880910, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2019-01-04 16:29:05", "update_id": 129304, "user_id": 2998, "id": 881442, "bug_feedback": [{"karma": 0, "comment_id": 881442, "bug_id": 1654929, "bug": {"bug_id": 1654929, "title": "CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification", "security": true, "parent": true}}, {"karma": 0, "comment_id": 881442, "bug_id": 1659095, "bug": {"bug_id": 1659095, "title": "CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "samoht0", "email": "samoht0-bugzilla@yahoo.com", "id": 2998, "avatar": "https://seccdn.libravatar.org/avatar/4a429e081c6c9f7b9d9cd4a3f4037fc93517c13e17258f8549f2d2f85f0912e7?s=24&d=retro", "openid": "samoht0.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2019-01-04 16:29:28", "update_id": 129304, "user_id": 2998, "id": 881443, "bug_feedback": [{"karma": 0, "comment_id": 881443, "bug_id": 1654929, "bug": {"bug_id": 1654929, "title": "CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification", "security": true, "parent": true}}, {"karma": 0, "comment_id": 881443, "bug_id": 1659095, "bug": {"bug_id": 1659095, "title": "CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "samoht0", "email": "samoht0-bugzilla@yahoo.com", "id": 2998, "avatar": "https://seccdn.libravatar.org/avatar/4a429e081c6c9f7b9d9cd4a3f4037fc93517c13e17258f8549f2d2f85f0912e7?s=24&d=retro", "openid": "samoht0.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2019-01-06 02:43:56", "update_id": 129304, "user_id": 182, "id": 881789, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "hreindl", "email": "h.reindl@thelounge.net", "id": 182, "avatar": "https://seccdn.libravatar.org/avatar/664e0d25c0404b7a153b4dbc5dc1f3d1be6a2e9fd91115fbb929fe16a55d21d7?s=24&d=retro", "openid": "hreindl.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 1, "text": "I tested all this when I worked on the fixes.", "timestamp": "2019-01-08 16:22:42", "update_id": 129304, "user_id": 713, "id": 882484, "bug_feedback": [{"karma": 1, "comment_id": 882484, "bug_id": 1654929, "bug": {"bug_id": 1654929, "title": "CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification", "security": true, "parent": true}}, {"karma": 1, "comment_id": 882484, "bug_id": 1659095, "bug": {"bug_id": 1659095, "title": "CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "simo", "email": "ssorce@redhat.com", "id": 713, "avatar": "https://seccdn.libravatar.org/avatar/d0b2821e27cf77357f60dd62f8e6e33f3ba958bcabb3fd0c6693f34da895625a?s=24&d=retro", "openid": "simo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "fedora-contributor"}, {"name": "cla_redhat"}, {"name": "signed_fpca"}, {"name": "latchset"}, {"name": "gitfreeipa-docs"}, {"name": "ipausers"}, {"name": "gitgss-ntlmssp"}, {"name": "gitfreeipa"}, {"name": "gitsssd"}, {"name": "crypto-team"}, {"name": "fedorabugs"}, {"name": "gitgss-proxy"}, {"name": "gitipsilon"}, {"name": "bind-dyndb-ldap"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for batched by bodhi. ", "timestamp": "2019-01-08 16:22:43", "update_id": 129304, "user_id": 91, "id": 882485, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2019-01-08 23:45:28", "update_id": 129304, "user_id": 91, "id": 882555, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2019-01-11 00:16:40", "update_id": 129304, "user_id": 91, "id": 883121, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "gnutls-3.6.5-1.fc28", "signed": true, "release_id": 21, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1654929, "title": "CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 874376, "bug_id": 1654929, "comment": {"karma": 1, "karma_critpath": 1, "text": "Before this update, F29 vncviewer would fail with \"TLS Handshake failed: An illegal TLS extension was received.\" when connecting to a VNC server using a gnutls with record_size_limit extension.\n\nThis gnutls update fixes F29 vncviewer.", "timestamp": "2018-12-13 15:40:50", "update_id": 128385, "user_id": 1920, "id": 874376, "testcase_feedback": [], "user": {"name": "jbastian", "email": "jbastian@redhat.com", "id": 1920, "avatar": "https://seccdn.libravatar.org/avatar/c00b873d4f9ad85014c3208ebba9ac348727772cb23451a70c027b87cbc59de8?s=24&d=retro", "openid": "jbastian.id.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 0, "comment_id": 874680, "bug_id": 1654929, "comment": {"karma": 1, "karma_critpath": 1, "text": "", "timestamp": "2018-12-14 13:07:07", "update_id": 128385, "user_id": 3437, "id": 874680, "testcase_feedback": [], "user": {"name": "cmorris", "email": "bf2006a@yahoo.com", "id": 3437, "avatar": "https://seccdn.libravatar.org/avatar/b60d084062150806b1fdf2fbbcebb6ebbac27d26951da066173b55951119c4c3?s=24&d=retro", "openid": "cmorris.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 881442, "bug_id": 1654929, "comment": {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2019-01-04 16:29:05", "update_id": 129304, "user_id": 2998, "id": 881442, "testcase_feedback": [], "user": {"name": "samoht0", "email": "samoht0-bugzilla@yahoo.com", "id": 2998, "avatar": "https://seccdn.libravatar.org/avatar/4a429e081c6c9f7b9d9cd4a3f4037fc93517c13e17258f8549f2d2f85f0912e7?s=24&d=retro", "openid": "samoht0.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 881443, "bug_id": 1654929, "comment": {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2019-01-04 16:29:28", "update_id": 129304, "user_id": 2998, "id": 881443, "testcase_feedback": [], "user": {"name": "samoht0", "email": "samoht0-bugzilla@yahoo.com", "id": 2998, "avatar": "https://seccdn.libravatar.org/avatar/4a429e081c6c9f7b9d9cd4a3f4037fc93517c13e17258f8549f2d2f85f0912e7?s=24&d=retro", "openid": "samoht0.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 881561, "bug_id": 1654929, "comment": {"karma": 0, "karma_critpath": 0, "text": "Note this update seems to require [the newer nettle from this other update](https://bodhi.fedoraproject.org/updates/FEDORA-2018-665e6dfcf0), but this dependency is not specified by the package. This update is marked as a security update but that one is not; so if you have a system which automatically installs only security updates, it will actually break when it installs this update, because it will not install the newer nettle.\n\n@kevin @puiterwijk you may see this on infra systems.", "timestamp": "2019-01-05 01:59:20", "update_id": 128385, "user_id": 302, "id": 881561, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "trust admins"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 1, "comment_id": 882484, "bug_id": 1654929, "comment": {"karma": 1, "karma_critpath": 1, "text": "I tested all this when I worked on the fixes.", "timestamp": "2019-01-08 16:22:42", "update_id": 129304, "user_id": 713, "id": 882484, "testcase_feedback": [], "user": {"name": "simo", "email": "ssorce@redhat.com", "id": 713, "avatar": "https://seccdn.libravatar.org/avatar/d0b2821e27cf77357f60dd62f8e6e33f3ba958bcabb3fd0c6693f34da895625a?s=24&d=retro", "openid": "simo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "fedora-contributor"}, {"name": "cla_redhat"}, {"name": "signed_fpca"}, {"name": "latchset"}, {"name": "gitfreeipa-docs"}, {"name": "ipausers"}, {"name": "gitgss-ntlmssp"}, {"name": "gitfreeipa"}, {"name": "gitsssd"}, {"name": "crypto-team"}, {"name": "fedorabugs"}, {"name": "gitgss-proxy"}, {"name": "gitipsilon"}, {"name": "bind-dyndb-ldap"}, {"name": "trust admins"}]}}}]}, {"bug_id": 1659095, "title": "CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 881442, "bug_id": 1659095, "comment": {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2019-01-04 16:29:05", "update_id": 129304, "user_id": 2998, "id": 881442, "testcase_feedback": [], "user": {"name": "samoht0", "email": "samoht0-bugzilla@yahoo.com", "id": 2998, "avatar": "https://seccdn.libravatar.org/avatar/4a429e081c6c9f7b9d9cd4a3f4037fc93517c13e17258f8549f2d2f85f0912e7?s=24&d=retro", "openid": "samoht0.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 881443, "bug_id": 1659095, "comment": {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2019-01-04 16:29:28", "update_id": 129304, "user_id": 2998, "id": 881443, "testcase_feedback": [], "user": {"name": "samoht0", "email": "samoht0-bugzilla@yahoo.com", "id": 2998, "avatar": "https://seccdn.libravatar.org/avatar/4a429e081c6c9f7b9d9cd4a3f4037fc93517c13e17258f8549f2d2f85f0912e7?s=24&d=retro", "openid": "samoht0.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 882484, "bug_id": 1659095, "comment": {"karma": 1, "karma_critpath": 1, "text": "I tested all this when I worked on the fixes.", "timestamp": "2019-01-08 16:22:42", "update_id": 129304, "user_id": 713, "id": 882484, "testcase_feedback": [], "user": {"name": "simo", "email": "ssorce@redhat.com", "id": 713, "avatar": "https://seccdn.libravatar.org/avatar/d0b2821e27cf77357f60dd62f8e6e33f3ba958bcabb3fd0c6693f34da895625a?s=24&d=retro", "openid": "simo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "fedora-contributor"}, {"name": "cla_redhat"}, {"name": "signed_fpca"}, {"name": "latchset"}, {"name": "gitfreeipa-docs"}, {"name": "ipausers"}, {"name": "gitgss-ntlmssp"}, {"name": "gitfreeipa"}, {"name": "gitsssd"}, {"name": "crypto-team"}, {"name": "fedorabugs"}, {"name": "gitgss-proxy"}, {"name": "gitipsilon"}, {"name": "bind-dyndb-ldap"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 884361, "bug_id": 1659095, "comment": {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2019-01-14 18:28:29", "update_id": 129825, "user_id": 2998, "id": 884361, "testcase_feedback": [], "user": {"name": "samoht0", "email": "samoht0-bugzilla@yahoo.com", "id": 2998, "avatar": "https://seccdn.libravatar.org/avatar/4a429e081c6c9f7b9d9cd4a3f4037fc93517c13e17258f8549f2d2f85f0912e7?s=24&d=retro", "openid": "samoht0.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}]}], "updateid": "FEDORA-2019-24dc022a51", "karma": 3, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}