{"update": {"autokarma": true, "autotime": true, "stable_karma": 3, "stable_days": 14, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "vga: avoid crash if no default vga card (rhbz#2095639)\nlsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)\nvnc-clipboard: fix integer underflow (CVE-2022-3165)", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": null, "close_bugs": true, "date_submitted": "2022-10-19 20:16:25", "date_modified": null, "date_approved": null, "date_testing": "2022-10-20 18:20:46", "date_stable": "2022-11-10 22:04:44", "alias": "FEDORA-2022-4387579e67", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2022-11-10 22:04:44", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2022-4387579e67", "title": "qemu-7.0.0-10.fc37", "version_hash": "11a39837772174f52cbdf7ee2f96767fd55da6da", "release": {"name": "F37", "long_name": "Fedora 37", "version": "37", "id_prefix": "FEDORA", "branch": "f37", "dist_tag": "f37", "stable_tag": "f37-updates", "testing_tag": "f37-updates-testing", "candidate_tag": "f37-updates-candidate", "pending_signing_tag": "f37-signing-pending", "pending_testing_tag": "f37-updates-testing-pending", "pending_stable_tag": "f37-updates-pending", "override_tag": "f37-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2023-12-05", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "mcascella", "email": "mcascell@redhat.com", "id": 7197, "avatar": "https://seccdn.libravatar.org/avatar/a1b46472954e90fc1acfc9c75d1243b632c5f097931faa414c36a7172e4c2161?s=24&d=retro", "openid": "mcascella.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "wikiedit"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by mcascella. ", "timestamp": "2022-10-19 20:16:26", "update_id": 455823, "user_id": 91, "id": 2757339, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2022-10-19 20:16:27", "update_id": 455823, "user_id": 91, "id": 2757340, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2022-10-19 21:47:56", "update_id": 455823, "user_id": 91, "id": 2757377, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "FEDORA-2022-4387579e67 ejected from the push because \"Cannot find relevant tag for qemu-7.0.0-10.fc37.  None of ['f37-updates-testing', 'f37-updates-testing-pending'] are in ['epel9-next-testing-candidate', 'epel7-testing-candidate', 'dist-5E-epel-testing-candidate', 'f27-modular-updates-candidate', 'eln-updates-candidate', 'f30-modular-updates-candidate', 'f28-modular-updates-candidate', 'f28-container-updates-candidate', 'f30-container-updates-candidate', 'epel8-testing-candidate', 'f30-flatpak-updates-candidate', 'f36-updates-candidate', 'f32-modular-updates-candidate', 'f29-modular-updates-candidate', 'f29-container-updates-candidate', 'f29-flatpak-updates-candidate', 'f22-updates-candidate', 'f21-updates-candidate', 'f25-updates-candidate', 'f24-updates-candidate', 'f23-updates-candidate', 'f26-updates-candidate', 'f31-modular-updates-candidate', 'dist-6E-epel-testing-candidate', 'f32-flatpak-updates-candidate', 'f36-container-updates-candidate', 'f37-modular-updates-candidate', 'f27-updates-candidate', 'f28-updates-candidate', 'f30-updates-candidate', 'f29-updates-candidate', 'el8-modular-updates-candidate', 'f32-updates-candidate', 'epel9-testing-candidate', 'f37-container-updates-candidate', 'f34-updates-candidate', 'f31-updates-candidate', 'f31-container-updates-candidate', 'f31-flatpak-updates-candidate', 'f34-modular-updates-candidate', 'f32-container-updates-candidate', 'epel8-next-testing-candidate', 'f35-updates-candidate', 'f35-modular-updates-candidate', 'f33-updates-candidate', 'f34-container-updates-candidate', 'f33-modular-updates-candidate', 'f33-container-updates-candidate', 'f33-flatpak-updates-candidate', 'f35-container-updates-candidate', 'f36-modular-updates-candidate', 'f35-flatpak-updates-candidate', 'f36-flatpak-updates-candidate', 'f34-flatpak-updates-candidate', 'f38-container-updates-candidate', 'f37-flatpak-updates-candidate', 'f38-updates-candidate', 'f37-updates-candidate'].\"", "timestamp": "2022-10-20 08:14:50", "update_id": 455823, "user_id": 91, "id": 2757542, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2022-10-20 08:42:31", "update_id": 455823, "user_id": 91, "id": 2757556, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by humaton. ", "timestamp": "2022-10-20 15:08:30", "update_id": 455823, "user_id": 91, "id": 2757932, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2022-10-20 15:08:31", "update_id": 455823, "user_id": 91, "id": 2757933, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2022-10-20 18:21:37", "update_id": 455823, "user_id": 91, "id": 2758321, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2022-10-20 18:22:01", "update_id": 455823, "user_id": 91, "id": 2758323, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2022-10-20 18:27:49", "update_id": 455823, "user_id": 91, "id": 2758352, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "my VMs seem to run fine", "timestamp": "2022-10-24 07:19:54", "update_id": 455823, "user_id": 411, "id": 2761838, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}]}}, {"karma": 1, "karma_critpath": 0, "text": "My use case is simplistic, but using virt-manager I can launch and use a CentOS Stream 9 VM and it is working fine.", "timestamp": "2022-10-27 00:54:56", "update_id": 455823, "user_id": 4756, "id": 2764920, "bug_feedback": [{"karma": 0, "comment_id": 2764920, "bug_id": 2070902, "bug": {"bug_id": 2070902, "title": "CVE-2022-0216 qemu: use-after-free in lsi_do_msgout function in hw/scsi/lsi53c895a.c [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2764920, "bug_id": 2095639, "bug": {"bug_id": 2095639, "title": "get Segmentation fault (core dumped) while run: qemu-system-s390x -M s390-ccw-virtio -vga help", "security": false, "parent": false}}, {"karma": 0, "comment_id": 2764920, "bug_id": 2129759, "bug": {"bug_id": 2129759, "title": "CVE-2022-3165 qemu: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2022-10-27 00:56:29", "update_id": 455823, "user_id": 91, "id": 2764921, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works well", "timestamp": "2022-10-27 15:39:03", "update_id": 455823, "user_id": 2240, "id": 2765577, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "frantisekz", "email": "fzatlouk@redhat.com", "id": 2240, "avatar": "https://seccdn.libravatar.org/avatar/665c5bc41bed444bc5fc8ea32da393449791968f9398dbe8ca045576e0ec52d3?s=24&d=retro", "openid": "frantisekz.id.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "qa"}, {"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "sysadmin"}, {"name": "ambassadors"}, {"name": "sysadmin-qa"}, {"name": "advocates"}, {"name": "qa-admin"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2022-10-27 15:39:03", "update_id": 455823, "user_id": 91, "id": 2765578, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2022-11-04 18:00:41", "update_id": 455823, "user_id": 107, "id": 2773795, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "nb", "email": "nick@bebout.net", "id": 107, "avatar": "https://seccdn.libravatar.org/avatar/2f33ca167b8f6e7ea7105ea1bf90935ca81575d091e57607aa513cbb74420927?s=24&d=retro", "openid": "nb.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "sysadmin-main"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "wikiedit"}, {"name": "l10n"}, {"name": "sysadmin-logs"}, {"name": "gitfedora-web"}, {"name": "fi-apprentice"}, {"name": "admins"}, {"name": "magazine"}, {"name": "sysadmin-badges"}, {"name": "security-team"}, {"name": "sysadmin-noc"}, {"name": "sysadmin"}, {"name": "fedora-hams"}, {"name": "accounts"}, {"name": "sysadmin-web"}, {"name": "ambassadors"}, {"name": "videos"}, {"name": "irc-support-operators"}, {"name": "cvsl10n"}, {"name": "cvsfedora"}, {"name": "ipausers"}, {"name": "ambassadors-emeriti"}, {"name": "sysadmin-veteran"}, {"name": "wikiadmin"}, {"name": "designteam"}, {"name": "famsco"}, {"name": "signed_fpca"}, {"name": "qa"}, {"name": "mindshare"}, {"name": "sysadmin-devel"}, {"name": "respins-sig"}, {"name": "web"}, {"name": "3d-printing-sig"}, {"name": "freemedia"}, {"name": "campusambassadors"}, {"name": "hosted-content"}, {"name": "aws-infra"}, {"name": "certbot-sig"}, {"name": "sysadmin-dns"}, {"name": "sysadmin-hosted"}, {"name": "sysadmin-tools"}, {"name": "marketing"}, {"name": "sysadmin-test"}, {"name": "advocates"}, {"name": "letsencrypt"}, {"name": "sysadmin-paste"}, {"name": "commops"}, {"name": "dotnet-sig"}, {"name": "fedora-contributor"}, {"name": "sysadmin-keys"}, {"name": "communishift"}, {"name": "altvideos"}, {"name": "fedorabugs"}, {"name": "aws-master"}, {"name": "fedora-socialmedia"}, {"name": "gitlab-fedora-admin"}, {"name": "clamav"}, {"name": "trust admins"}, {"name": "aws"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2022-11-10 22:33:43", "update_id": 455823, "user_id": 91, "id": 2781159, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "qemu-7.0.0-10.fc37", "signed": true, "release_id": 62, "type": "rpm", "epoch": 2}], "bugs": [{"bug_id": 2070902, "title": "CVE-2022-0216 qemu: use-after-free in lsi_do_msgout function in hw/scsi/lsi53c895a.c [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2681959, "bug_id": 2070902, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me.", "timestamp": "2022-08-16 15:53:55", "update_id": 440359, "user_id": 5791, "id": 2681959, "testcase_feedback": [], "user": {"name": "pampelmuse", "email": "pampelmuse@gmx.at", "id": 5791, "avatar": "https://seccdn.libravatar.org/avatar/bb6c6342bfedc934915501150e118faf015cde0f79677ee978989c5234cd8b1b?s=24&d=retro", "openid": "pampelmuse.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 2764920, "bug_id": 2070902, "comment": {"karma": 1, "karma_critpath": 0, "text": "My use case is simplistic, but using virt-manager I can launch and use a CentOS Stream 9 VM and it is working fine.", "timestamp": "2022-10-27 00:54:56", "update_id": 455823, "user_id": 4756, "id": 2764920, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2095639, "title": "get Segmentation fault (core dumped) while run: qemu-system-s390x -M s390-ccw-virtio -vga help", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 2764920, "bug_id": 2095639, "comment": {"karma": 1, "karma_critpath": 0, "text": "My use case is simplistic, but using virt-manager I can launch and use a CentOS Stream 9 VM and it is working fine.", "timestamp": "2022-10-27 00:54:56", "update_id": 455823, "user_id": 4756, "id": 2764920, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2129759, "title": "CVE-2022-3165 qemu: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2764920, "bug_id": 2129759, "comment": {"karma": 1, "karma_critpath": 0, "text": "My use case is simplistic, but using virt-manager I can launch and use a CentOS Stream 9 VM and it is working fine.", "timestamp": "2022-10-27 00:54:56", "update_id": 455823, "user_id": 4756, "id": 2764920, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 2758050, "bug_id": 2129759, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me.", "timestamp": "2022-10-20 15:38:05", "update_id": 455396, "user_id": 5791, "id": 2758050, "testcase_feedback": [], "user": {"name": "pampelmuse", "email": "pampelmuse@gmx.at", "id": 5791, "avatar": "https://seccdn.libravatar.org/avatar/bb6c6342bfedc934915501150e118faf015cde0f79677ee978989c5234cd8b1b?s=24&d=retro", "openid": "pampelmuse.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}], "updateid": "FEDORA-2022-4387579e67", "karma": 4, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}