{"update": {"autokarma": false, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files.", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2019-02-21 11:22:07", "date_modified": null, "date_approved": null, "date_testing": "2019-02-22 03:05:50", "date_stable": "2019-02-26 03:04:46", "alias": "FEDORA-2019-7a554204c1", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2019-02-26 03:04:46", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2019-7a554204c1", "title": "SDL-1.2.15-36.fc29", "version_hash": "8e240f34aeb9ace6d62316977fb8302b4607d885", "release": {"name": "F29", "long_name": "Fedora 29", "version": "29", "id_prefix": "FEDORA", "branch": "f29", "dist_tag": "f29", "stable_tag": "f29-updates", "testing_tag": "f29-updates-testing", "candidate_tag": "f29-updates-candidate", "pending_signing_tag": "f29-signing-pending", "pending_testing_tag": "f29-updates-testing-pending", "pending_stable_tag": "f29-updates-pending", "override_tag": "f29-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "ppisar", "email": "ppisar@redhat.com", "id": 227, "avatar": "https://seccdn.libravatar.org/avatar/4f25d013cd1c1679b32539ec8afe738557625a2c2e8fa77224307b8579ef29be?s=24&d=retro", "openid": "ppisar.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "modularity-wg"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "perl-maint-sig"}, {"name": "rpm-software-management-sig"}, {"name": "trust admins"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by ppisar. ", "timestamp": "2019-02-21 11:22:07", "update_id": 132105, "user_id": 91, "id": 898066, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2019-02-22 03:06:41", "update_id": 132105, "user_id": 91, "id": 898356, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works great!  LGTM!  =)", "timestamp": "2019-02-22 09:16:55", "update_id": 132105, "user_id": 206, "id": 898504, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "besser82", "email": "besser82.fpo@gmail.com", "id": 206, "avatar": "https://seccdn.libravatar.org/avatar/28bacfa3be75032390ac2c7a34599aeb825c3b62b2c55ef64821d2fc023b56cb?s=24&d=retro", "openid": "besser82.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "designteam"}, {"name": "shogun-ca"}, {"name": "alt-gtk-de-sig"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "works great", "timestamp": "2019-02-24 12:13:02", "update_id": 132105, "user_id": 4598, "id": 899410, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "andilinux", "email": "Kartz@gmx.net", "id": 4598, "avatar": "https://seccdn.libravatar.org/avatar/b820090b49856dc08f6ed6f3cd43f9d1920be6ee51f83ebb0b4f9904a7306f1a?s=24&d=retro", "openid": "andilinux.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "fedora-join"}, {"name": "ask-fedora"}]}}, {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2019-02-25 01:24:23", "update_id": 132105, "user_id": 124, "id": 899595, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "filiperosset", "email": "rosset.filipe@gmail.com", "id": 124, "avatar": "https://seccdn.libravatar.org/avatar/f4394b8fb4c9a99c4b534dc724912fe75a5b87fe15048985ece8388c2441d0ca?s=24&d=retro", "openid": "filiperosset.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "trust admins"}, {"name": "signed_fpca"}, {"name": "fedora-contributor"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "ipausers"}, {"name": "fedora-br"}, {"name": "fedorabugs"}, {"name": "ambassadors"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.", "timestamp": "2019-02-25 06:02:27", "update_id": 132105, "user_id": 91, "id": 899807, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by ppisar. ", "timestamp": "2019-02-25 09:46:40", "update_id": 132105, "user_id": 91, "id": 899856, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2019-02-26 03:06:59", "update_id": 132105, "user_id": 91, "id": 900248, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "SDL-1.2.15-36.fc29", "signed": true, "release_id": 23, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1676509, "title": "CVE-2019-7577 SDL: Buffer over-read in function SDL_LoadWAV_RW in audio/SDL_wave.c", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 908119, "bug_id": 1676509, "comment": {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2019-03-13 18:22:45", "update_id": 133577, "user_id": 2998, "id": 908119, "testcase_feedback": [], "user": {"name": "samoht0", "email": "samoht0-bugzilla@yahoo.com", "id": 2998, "avatar": "https://seccdn.libravatar.org/avatar/4a429e081c6c9f7b9d9cd4a3f4037fc93517c13e17258f8549f2d2f85f0912e7?s=24&d=retro", "openid": "samoht0.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 909170, "bug_id": 1676509, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2019-03-15 21:06:18", "update_id": 133575, "user_id": 4120, "id": 909170, "testcase_feedback": [], "user": {"name": "atim", "email": "ego.cordatus@gmail.com", "id": 4120, "avatar": "https://seccdn.libravatar.org/avatar/8c3a317a13d88ca7421098b94cce0501c97ca2283e7139c4992df34f6218fb3b?s=24&d=retro", "openid": "atim.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "rust-sig"}]}}}]}, {"bug_id": 1676510, "title": "CVE-2019-7577 SDL: Buffer over-read in function SDL_LoadWAV_RW in audio/SDL_wave.c [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 908119, "bug_id": 1676510, "comment": {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2019-03-13 18:22:45", "update_id": 133577, "user_id": 2998, "id": 908119, "testcase_feedback": [], "user": {"name": "samoht0", "email": "samoht0-bugzilla@yahoo.com", "id": 2998, "avatar": "https://seccdn.libravatar.org/avatar/4a429e081c6c9f7b9d9cd4a3f4037fc93517c13e17258f8549f2d2f85f0912e7?s=24&d=retro", "openid": "samoht0.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 909170, "bug_id": 1676510, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2019-03-15 21:06:18", "update_id": 133575, "user_id": 4120, "id": 909170, "testcase_feedback": [], "user": {"name": "atim", "email": "ego.cordatus@gmail.com", "id": 4120, "avatar": "https://seccdn.libravatar.org/avatar/8c3a317a13d88ca7421098b94cce0501c97ca2283e7139c4992df34f6218fb3b?s=24&d=retro", "openid": "atim.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "rust-sig"}]}}}]}, {"bug_id": 1676743, "title": "CVE-2019-7575 SDL: Heap based buffer overflow in function MS_ADPCM_decode in audio/SDL_wave.c", "security": true, "parent": true, "feedback": []}, {"bug_id": 1676744, "title": "CVE-2019-7575 SDL: Heap based buffer overflow in function MS_ADPCM_decode in audio/SDL_wave.c [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1676749, "title": "CVE-2019-7574 SDL: heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c", "security": true, "parent": true, "feedback": []}, {"bug_id": 1676750, "title": "CVE-2019-7574 SDL: heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1676751, "title": "CVE-2019-7573 SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c", "security": true, "parent": true, "feedback": []}, {"bug_id": 1676752, "title": "CVE-2019-7573 SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1676753, "title": "CVE-2019-7572 SDL: Buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c", "security": true, "parent": true, "feedback": []}, {"bug_id": 1676754, "title": "CVE-2019-7572 SDL: BUffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1676755, "title": "CVE-2019-7576 SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c", "security": true, "parent": true, "feedback": []}, {"bug_id": 1676756, "title": "CVE-2019-7576 SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1676781, "title": "CVE-2019-7578 SDL: heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c", "security": true, "parent": true, "feedback": []}, {"bug_id": 1676782, "title": "CVE-2019-7578 SDL: heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1677143, "title": "CVE-2019-7638 SDL: heap-based buffer over-read in Map1toN in video/SDL_pixels.c", "security": true, "parent": true, "feedback": []}, {"bug_id": 1677144, "title": "CVE-2019-7638 SDL: heap-based buffer over-read in Map1toN in video/SDL_pixels.c [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1677151, "title": "CVE-2019-7637 SDL: heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c", "security": true, "parent": true, "feedback": []}, {"bug_id": 1677152, "title": "CVE-2019-7637 SDL: heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1677156, "title": "CVE-2019-7636 SDL: heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c", "security": true, "parent": true, "feedback": []}, {"bug_id": 1677157, "title": "CVE-2019-7636 SDL: heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1677158, "title": "CVE-2019-7635 SDL: heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c", "security": true, "parent": true, "feedback": []}, {"bug_id": 1677159, "title": "CVE-2019-7635 SDL: heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c [fedora-all]", "security": true, "parent": false, "feedback": []}], "updateid": "FEDORA-2019-7a554204c1", "karma": 3, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}