{"update": {"autokarma": true, "autotime": true, "stable_karma": 3, "stable_days": 14, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Update to version 4.17.0\n\n\n\n\n", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": null, "close_bugs": true, "date_submitted": "2022-09-14 05:37:21", "date_modified": "2022-09-14 10:31:15", "date_approved": null, "date_testing": "2022-09-15 01:47:40", "date_stable": "2022-09-16 00:15:48", "alias": "FEDORA-2022-4555909843", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2022-09-16 00:15:48", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2022-4555909843", "title": "freeipa-4.10.0-6.fc37 samba-4.17.0-1.fc37", "version_hash": "7add69b1a69a7963285814301e9abfbf9663cd0b", "release": {"name": "F37", "long_name": "Fedora 37", "version": "37", "id_prefix": "FEDORA", "branch": "f37", "dist_tag": "f37", "stable_tag": "f37-updates", "testing_tag": "f37-updates-testing", "candidate_tag": "f37-updates-candidate", "pending_signing_tag": "f37-signing-pending", "pending_testing_tag": "f37-updates-testing-pending", "pending_stable_tag": "f37-updates-pending", "override_tag": "f37-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2023-12-05", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "asn", "email": "asn@redhat.com", "id": 118, "avatar": "https://seccdn.libravatar.org/avatar/7923aade18dd01be2938d699b7d155a5e97c09d3b80126c9b9163d5be54384ab?s=24&d=retro", "openid": "asn.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}, {"name": "gitosutil"}, {"name": "svnpki"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by asn. ", "timestamp": "2022-09-14 05:37:22", "update_id": 447569, "user_id": 91, "id": 2716092, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2022-09-14 05:37:22", "update_id": 447569, "user_id": 91, "id": 2716093, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2022-09-14 06:48:25", "update_id": 447569, "user_id": 91, "id": 2716102, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "asn edited this update.", "timestamp": "2022-09-14 08:00:40", "update_id": 447569, "user_id": 91, "id": 2716126, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "asn edited this update.", "timestamp": "2022-09-14 08:01:28", "update_id": 447569, "user_id": 91, "id": 2716127, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2022-09-14 08:02:14", "update_id": 447569, "user_id": 91, "id": 2716128, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2022-09-14 08:02:16", "update_id": 447569, "user_id": 91, "id": 2716129, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "asn edited this update.", "timestamp": "2022-09-14 08:48:45", "update_id": 447569, "user_id": 91, "id": 2716159, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "asn edited this update.", "timestamp": "2022-09-14 08:50:17", "update_id": 447569, "user_id": 91, "id": 2716160, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2022-09-14 08:50:23", "update_id": 447569, "user_id": 91, "id": 2716161, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2022-09-14 09:35:10", "update_id": 447569, "user_id": 91, "id": 2716214, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This package update cannot be pushed to testing because it needs FreeIPA rebuild. ", "timestamp": "2022-09-14 09:49:27", "update_id": 447569, "user_id": 1242, "id": 2716216, "bug_feedback": [{"karma": 0, "comment_id": 2716216, "bug_id": 2096405, "bug": {"bug_id": 2096405, "title": "Manual configuration in root partition required before Samba shares can be created", "security": false, "parent": false}}, {"karma": 0, "comment_id": 2716216, "bug_id": 2118818, "bug": {"bug_id": 2118818, "title": "samba-4.17.0rc5 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 2716216, "bug_id": 2121138, "bug": {"bug_id": 2121138, "title": "CVE-2022-32743 samba: Validated dnsHostname write right needs to be implemented [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2716216, "bug_id": 2122650, "bug": {"bug_id": 2122650, "title": "CVE-2022-1615 samba: GnuTLS gnutls_rnd() can fail and give predictable random values [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2716216, "bug_id": 2126548, "bug": {"bug_id": 2126548, "title": "samba-4.17.0 is available", "security": false, "parent": false}}], "testcase_feedback": [{"karma": 0, "comment_id": 2716216, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "I am rebuilding FreeIPA and will add to this update.", "timestamp": "2022-09-14 09:58:47", "update_id": 447569, "user_id": 1242, "id": 2716220, "bug_feedback": [{"karma": 0, "comment_id": 2716220, "bug_id": 2096405, "bug": {"bug_id": 2096405, "title": "Manual configuration in root partition required before Samba shares can be created", "security": false, "parent": false}}, {"karma": 0, "comment_id": 2716220, "bug_id": 2118818, "bug": {"bug_id": 2118818, "title": "samba-4.17.0rc5 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 2716220, "bug_id": 2121138, "bug": {"bug_id": 2121138, "title": "CVE-2022-32743 samba: Validated dnsHostname write right needs to be implemented [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2716220, "bug_id": 2122650, "bug": {"bug_id": 2122650, "title": "CVE-2022-1615 samba: GnuTLS gnutls_rnd() can fail and give predictable random values [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2716220, "bug_id": 2126548, "bug": {"bug_id": 2126548, "title": "samba-4.17.0 is available", "security": false, "parent": false}}], "testcase_feedback": [{"karma": 0, "comment_id": 2716220, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "abbra edited this update.\n\nNew build(s):\n\n- freeipa-4.10.0-6.fc37\n\nKarma has been reset.", "timestamp": "2022-09-14 10:31:15", "update_id": 447569, "user_id": 91, "id": 2716266, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": -1, "karma_critpath": 0, "text": "It's still missing something; when we install the `freeipa-server` group, samba gets downgraded to 4.17.0-0.8.rc3.fc37 , which implies that something in the `freeipa-server` group and its deps needs rebuilding for the new samba. Not sure what yet.", "timestamp": "2022-09-14 22:41:56", "update_id": 447569, "user_id": 302, "id": 2716923, "bug_feedback": [{"karma": 0, "comment_id": 2716923, "bug_id": 2096405, "bug": {"bug_id": 2096405, "title": "Manual configuration in root partition required before Samba shares can be created", "security": false, "parent": false}}, {"karma": 0, "comment_id": 2716923, "bug_id": 2118818, "bug": {"bug_id": 2118818, "title": "samba-4.17.0rc5 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 2716923, "bug_id": 2121138, "bug": {"bug_id": 2121138, "title": "CVE-2022-32743 samba: Validated dnsHostname write right needs to be implemented [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2716923, "bug_id": 2122650, "bug": {"bug_id": 2122650, "title": "CVE-2022-1615 samba: GnuTLS gnutls_rnd() can fail and give predictable random values [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2716923, "bug_id": 2126548, "bug": {"bug_id": 2126548, "title": "samba-4.17.0 is available", "security": false, "parent": false}}], "testcase_feedback": [{"karma": 0, "comment_id": 2716923, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Hum. That's an odd one, because I couldn't reproduce it locally in a mock, and if I make the test pass `--best` it stops happening and the test passes. So not quite sure what's going OK, but it looks like it would actually be OK if this got pushed stable and rc3 went away.\n\n@asn , next time, if you can, please check with me before waiving results. The failures weren't exactly irrelevant. What openQA is doing there is: first it checks which (if any) binary packages that are part of the update were installed during the test, and then for all the ones that were installed, it checks the version installed was the version from the update. Usually, if we find an older version than the one in the update is installed, that means there's a dependency problem in the update that needs to be resolved.", "timestamp": "2022-09-15 00:51:39", "update_id": 447569, "user_id": 302, "id": 2717012, "bug_feedback": [{"karma": 0, "comment_id": 2717012, "bug_id": 2096405, "bug": {"bug_id": 2096405, "title": "Manual configuration in root partition required before Samba shares can be created", "security": false, "parent": false}}, {"karma": 0, "comment_id": 2717012, "bug_id": 2118818, "bug": {"bug_id": 2118818, "title": "samba-4.17.0rc5 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 2717012, "bug_id": 2121138, "bug": {"bug_id": 2121138, "title": "CVE-2022-32743 samba: Validated dnsHostname write right needs to be implemented [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2717012, "bug_id": 2122650, "bug": {"bug_id": 2122650, "title": "CVE-2022-1615 samba: GnuTLS gnutls_rnd() can fail and give predictable random values [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2717012, "bug_id": 2126548, "bug": {"bug_id": 2126548, "title": "samba-4.17.0 is available", "security": false, "parent": false}}], "testcase_feedback": [{"karma": 0, "comment_id": 2717012, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2022-09-15 01:49:31", "update_id": 447569, "user_id": 91, "id": 2717051, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Test ipa server+replica install with CA, KRA, DNS. The update is functional", "timestamp": "2022-09-15 08:37:56", "update_id": 447569, "user_id": 3071, "id": 2717479, "bug_feedback": [{"karma": 0, "comment_id": 2717479, "bug_id": 2096405, "bug": {"bug_id": 2096405, "title": "Manual configuration in root partition required before Samba shares can be created", "security": false, "parent": false}}, {"karma": 0, "comment_id": 2717479, "bug_id": 2118818, "bug": {"bug_id": 2118818, "title": "samba-4.17.0rc5 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 2717479, "bug_id": 2121138, "bug": {"bug_id": 2121138, "title": "CVE-2022-32743 samba: Validated dnsHostname write right needs to be implemented [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2717479, "bug_id": 2122650, "bug": {"bug_id": 2122650, "title": "CVE-2022-1615 samba: GnuTLS gnutls_rnd() can fail and give predictable random values [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2717479, "bug_id": 2126548, "bug": {"bug_id": 2126548, "title": "samba-4.17.0 is available", "security": false, "parent": false}}], "testcase_feedback": [{"karma": 0, "comment_id": 2717479, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2022-09-15 08:40:00", "update_id": 447569, "user_id": 91, "id": 2717482, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by abbra. ", "timestamp": "2022-09-15 08:40:57", "update_id": 447569, "user_id": 91, "id": 2717483, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Does freeipa require a fixed Samba version? Do we always need to rebuild freeipa, it is totally unclear why this would need rebuilding as changes between the rc and final are code fixes and not ABI or API changes.", "timestamp": "2022-09-15 09:46:23", "update_id": 447569, "user_id": 118, "id": 2717552, "bug_feedback": [{"karma": 0, "comment_id": 2717552, "bug_id": 2096405, "bug": {"bug_id": 2096405, "title": "Manual configuration in root partition required before Samba shares can be created", "security": false, "parent": false}}, {"karma": 0, "comment_id": 2717552, "bug_id": 2118818, "bug": {"bug_id": 2118818, "title": "samba-4.17.0rc5 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 2717552, "bug_id": 2121138, "bug": {"bug_id": 2121138, "title": "CVE-2022-32743 samba: Validated dnsHostname write right needs to be implemented [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2717552, "bug_id": 2122650, "bug": {"bug_id": 2122650, "title": "CVE-2022-1615 samba: GnuTLS gnutls_rnd() can fail and give predictable random values [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2717552, "bug_id": 2126548, "bug": {"bug_id": 2126548, "title": "samba-4.17.0 is available", "security": false, "parent": false}}], "testcase_feedback": [{"karma": 0, "comment_id": 2717552, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "asn", "email": "asn@redhat.com", "id": 118, "avatar": "https://seccdn.libravatar.org/avatar/7923aade18dd01be2938d699b7d155a5e97c09d3b80126c9b9163d5be54384ab?s=24&d=retro", "openid": "asn.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}, {"name": "gitosutil"}, {"name": "svnpki"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2022-09-16 00:17:07", "update_id": 447569, "user_id": 91, "id": 2718182, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "freeipa-4.10.0-6.fc37", "signed": true, "release_id": 62, "type": "rpm", "epoch": 0}, {"nvr": "samba-4.17.0-1.fc37", "signed": true, "release_id": 62, "type": "rpm", "epoch": 2}], "bugs": [{"bug_id": 2096405, "title": "Manual configuration in root partition required before Samba shares can be created", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 2716216, "bug_id": 2096405, "comment": {"karma": 0, "karma_critpath": 0, "text": "This package update cannot be pushed to testing because it needs FreeIPA rebuild. ", "timestamp": "2022-09-14 09:49:27", "update_id": 447569, "user_id": 1242, "id": 2716216, "testcase_feedback": [{"karma": 0, "comment_id": 2716216, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716220, "bug_id": 2096405, "comment": {"karma": 0, "karma_critpath": 0, "text": "I am rebuilding FreeIPA and will add to this update.", "timestamp": "2022-09-14 09:58:47", "update_id": 447569, "user_id": 1242, "id": 2716220, "testcase_feedback": [{"karma": 0, "comment_id": 2716220, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716923, "bug_id": 2096405, "comment": {"karma": -1, "karma_critpath": 0, "text": "It's still missing something; when we install the `freeipa-server` group, samba gets downgraded to 4.17.0-0.8.rc3.fc37 , which implies that something in the `freeipa-server` group and its deps needs rebuilding for the new samba. Not sure what yet.", "timestamp": "2022-09-14 22:41:56", "update_id": 447569, "user_id": 302, "id": 2716923, "testcase_feedback": [{"karma": 0, "comment_id": 2716923, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717012, "bug_id": 2096405, "comment": {"karma": 1, "karma_critpath": 0, "text": "Hum. That's an odd one, because I couldn't reproduce it locally in a mock, and if I make the test pass `--best` it stops happening and the test passes. So not quite sure what's going OK, but it looks like it would actually be OK if this got pushed stable and rc3 went away.\n\n@asn , next time, if you can, please check with me before waiving results. The failures weren't exactly irrelevant. What openQA is doing there is: first it checks which (if any) binary packages that are part of the update were installed during the test, and then for all the ones that were installed, it checks the version installed was the version from the update. Usually, if we find an older version than the one in the update is installed, that means there's a dependency problem in the update that needs to be resolved.", "timestamp": "2022-09-15 00:51:39", "update_id": 447569, "user_id": 302, "id": 2717012, "testcase_feedback": [{"karma": 0, "comment_id": 2717012, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717479, "bug_id": 2096405, "comment": {"karma": 1, "karma_critpath": 0, "text": "Test ipa server+replica install with CA, KRA, DNS. The update is functional", "timestamp": "2022-09-15 08:37:56", "update_id": 447569, "user_id": 3071, "id": 2717479, "testcase_feedback": [{"karma": 0, "comment_id": 2717479, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}, {"karma": 0, "comment_id": 2717552, "bug_id": 2096405, "comment": {"karma": 0, "karma_critpath": 0, "text": "Does freeipa require a fixed Samba version? Do we always need to rebuild freeipa, it is totally unclear why this would need rebuilding as changes between the rc and final are code fixes and not ABI or API changes.", "timestamp": "2022-09-15 09:46:23", "update_id": 447569, "user_id": 118, "id": 2717552, "testcase_feedback": [{"karma": 0, "comment_id": 2717552, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "asn", "email": "asn@redhat.com", "id": 118, "avatar": "https://seccdn.libravatar.org/avatar/7923aade18dd01be2938d699b7d155a5e97c09d3b80126c9b9163d5be54384ab?s=24&d=retro", "openid": "asn.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}, {"name": "gitosutil"}, {"name": "svnpki"}]}}}]}, {"bug_id": 2118818, "title": "samba-4.17.0rc5 is available", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 2716216, "bug_id": 2118818, "comment": {"karma": 0, "karma_critpath": 0, "text": "This package update cannot be pushed to testing because it needs FreeIPA rebuild. ", "timestamp": "2022-09-14 09:49:27", "update_id": 447569, "user_id": 1242, "id": 2716216, "testcase_feedback": [{"karma": 0, "comment_id": 2716216, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716220, "bug_id": 2118818, "comment": {"karma": 0, "karma_critpath": 0, "text": "I am rebuilding FreeIPA and will add to this update.", "timestamp": "2022-09-14 09:58:47", "update_id": 447569, "user_id": 1242, "id": 2716220, "testcase_feedback": [{"karma": 0, "comment_id": 2716220, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716923, "bug_id": 2118818, "comment": {"karma": -1, "karma_critpath": 0, "text": "It's still missing something; when we install the `freeipa-server` group, samba gets downgraded to 4.17.0-0.8.rc3.fc37 , which implies that something in the `freeipa-server` group and its deps needs rebuilding for the new samba. Not sure what yet.", "timestamp": "2022-09-14 22:41:56", "update_id": 447569, "user_id": 302, "id": 2716923, "testcase_feedback": [{"karma": 0, "comment_id": 2716923, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717012, "bug_id": 2118818, "comment": {"karma": 1, "karma_critpath": 0, "text": "Hum. That's an odd one, because I couldn't reproduce it locally in a mock, and if I make the test pass `--best` it stops happening and the test passes. So not quite sure what's going OK, but it looks like it would actually be OK if this got pushed stable and rc3 went away.\n\n@asn , next time, if you can, please check with me before waiving results. The failures weren't exactly irrelevant. What openQA is doing there is: first it checks which (if any) binary packages that are part of the update were installed during the test, and then for all the ones that were installed, it checks the version installed was the version from the update. Usually, if we find an older version than the one in the update is installed, that means there's a dependency problem in the update that needs to be resolved.", "timestamp": "2022-09-15 00:51:39", "update_id": 447569, "user_id": 302, "id": 2717012, "testcase_feedback": [{"karma": 0, "comment_id": 2717012, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717479, "bug_id": 2118818, "comment": {"karma": 1, "karma_critpath": 0, "text": "Test ipa server+replica install with CA, KRA, DNS. The update is functional", "timestamp": "2022-09-15 08:37:56", "update_id": 447569, "user_id": 3071, "id": 2717479, "testcase_feedback": [{"karma": 0, "comment_id": 2717479, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}, {"karma": 0, "comment_id": 2717552, "bug_id": 2118818, "comment": {"karma": 0, "karma_critpath": 0, "text": "Does freeipa require a fixed Samba version? Do we always need to rebuild freeipa, it is totally unclear why this would need rebuilding as changes between the rc and final are code fixes and not ABI or API changes.", "timestamp": "2022-09-15 09:46:23", "update_id": 447569, "user_id": 118, "id": 2717552, "testcase_feedback": [{"karma": 0, "comment_id": 2717552, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "asn", "email": "asn@redhat.com", "id": 118, "avatar": "https://seccdn.libravatar.org/avatar/7923aade18dd01be2938d699b7d155a5e97c09d3b80126c9b9163d5be54384ab?s=24&d=retro", "openid": "asn.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}, {"name": "gitosutil"}, {"name": "svnpki"}]}}}]}, {"bug_id": 2121138, "title": "CVE-2022-32743 samba: Validated dnsHostname write right needs to be implemented [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2716216, "bug_id": 2121138, "comment": {"karma": 0, "karma_critpath": 0, "text": "This package update cannot be pushed to testing because it needs FreeIPA rebuild. ", "timestamp": "2022-09-14 09:49:27", "update_id": 447569, "user_id": 1242, "id": 2716216, "testcase_feedback": [{"karma": 0, "comment_id": 2716216, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716220, "bug_id": 2121138, "comment": {"karma": 0, "karma_critpath": 0, "text": "I am rebuilding FreeIPA and will add to this update.", "timestamp": "2022-09-14 09:58:47", "update_id": 447569, "user_id": 1242, "id": 2716220, "testcase_feedback": [{"karma": 0, "comment_id": 2716220, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716923, "bug_id": 2121138, "comment": {"karma": -1, "karma_critpath": 0, "text": "It's still missing something; when we install the `freeipa-server` group, samba gets downgraded to 4.17.0-0.8.rc3.fc37 , which implies that something in the `freeipa-server` group and its deps needs rebuilding for the new samba. Not sure what yet.", "timestamp": "2022-09-14 22:41:56", "update_id": 447569, "user_id": 302, "id": 2716923, "testcase_feedback": [{"karma": 0, "comment_id": 2716923, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717012, "bug_id": 2121138, "comment": {"karma": 1, "karma_critpath": 0, "text": "Hum. That's an odd one, because I couldn't reproduce it locally in a mock, and if I make the test pass `--best` it stops happening and the test passes. So not quite sure what's going OK, but it looks like it would actually be OK if this got pushed stable and rc3 went away.\n\n@asn , next time, if you can, please check with me before waiving results. The failures weren't exactly irrelevant. What openQA is doing there is: first it checks which (if any) binary packages that are part of the update were installed during the test, and then for all the ones that were installed, it checks the version installed was the version from the update. Usually, if we find an older version than the one in the update is installed, that means there's a dependency problem in the update that needs to be resolved.", "timestamp": "2022-09-15 00:51:39", "update_id": 447569, "user_id": 302, "id": 2717012, "testcase_feedback": [{"karma": 0, "comment_id": 2717012, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717479, "bug_id": 2121138, "comment": {"karma": 1, "karma_critpath": 0, "text": "Test ipa server+replica install with CA, KRA, DNS. The update is functional", "timestamp": "2022-09-15 08:37:56", "update_id": 447569, "user_id": 3071, "id": 2717479, "testcase_feedback": [{"karma": 0, "comment_id": 2717479, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}, {"karma": 0, "comment_id": 2717552, "bug_id": 2121138, "comment": {"karma": 0, "karma_critpath": 0, "text": "Does freeipa require a fixed Samba version? Do we always need to rebuild freeipa, it is totally unclear why this would need rebuilding as changes between the rc and final are code fixes and not ABI or API changes.", "timestamp": "2022-09-15 09:46:23", "update_id": 447569, "user_id": 118, "id": 2717552, "testcase_feedback": [{"karma": 0, "comment_id": 2717552, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "asn", "email": "asn@redhat.com", "id": 118, "avatar": "https://seccdn.libravatar.org/avatar/7923aade18dd01be2938d699b7d155a5e97c09d3b80126c9b9163d5be54384ab?s=24&d=retro", "openid": "asn.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}, {"name": "gitosutil"}, {"name": "svnpki"}]}}}]}, {"bug_id": 2122650, "title": "CVE-2022-1615 samba: GnuTLS gnutls_rnd() can fail and give predictable random values [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2716216, "bug_id": 2122650, "comment": {"karma": 0, "karma_critpath": 0, "text": "This package update cannot be pushed to testing because it needs FreeIPA rebuild. ", "timestamp": "2022-09-14 09:49:27", "update_id": 447569, "user_id": 1242, "id": 2716216, "testcase_feedback": [{"karma": 0, "comment_id": 2716216, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716220, "bug_id": 2122650, "comment": {"karma": 0, "karma_critpath": 0, "text": "I am rebuilding FreeIPA and will add to this update.", "timestamp": "2022-09-14 09:58:47", "update_id": 447569, "user_id": 1242, "id": 2716220, "testcase_feedback": [{"karma": 0, "comment_id": 2716220, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716923, "bug_id": 2122650, "comment": {"karma": -1, "karma_critpath": 0, "text": "It's still missing something; when we install the `freeipa-server` group, samba gets downgraded to 4.17.0-0.8.rc3.fc37 , which implies that something in the `freeipa-server` group and its deps needs rebuilding for the new samba. Not sure what yet.", "timestamp": "2022-09-14 22:41:56", "update_id": 447569, "user_id": 302, "id": 2716923, "testcase_feedback": [{"karma": 0, "comment_id": 2716923, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717012, "bug_id": 2122650, "comment": {"karma": 1, "karma_critpath": 0, "text": "Hum. That's an odd one, because I couldn't reproduce it locally in a mock, and if I make the test pass `--best` it stops happening and the test passes. So not quite sure what's going OK, but it looks like it would actually be OK if this got pushed stable and rc3 went away.\n\n@asn , next time, if you can, please check with me before waiving results. The failures weren't exactly irrelevant. What openQA is doing there is: first it checks which (if any) binary packages that are part of the update were installed during the test, and then for all the ones that were installed, it checks the version installed was the version from the update. Usually, if we find an older version than the one in the update is installed, that means there's a dependency problem in the update that needs to be resolved.", "timestamp": "2022-09-15 00:51:39", "update_id": 447569, "user_id": 302, "id": 2717012, "testcase_feedback": [{"karma": 0, "comment_id": 2717012, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717479, "bug_id": 2122650, "comment": {"karma": 1, "karma_critpath": 0, "text": "Test ipa server+replica install with CA, KRA, DNS. The update is functional", "timestamp": "2022-09-15 08:37:56", "update_id": 447569, "user_id": 3071, "id": 2717479, "testcase_feedback": [{"karma": 0, "comment_id": 2717479, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}, {"karma": 0, "comment_id": 2717552, "bug_id": 2122650, "comment": {"karma": 0, "karma_critpath": 0, "text": "Does freeipa require a fixed Samba version? Do we always need to rebuild freeipa, it is totally unclear why this would need rebuilding as changes between the rc and final are code fixes and not ABI or API changes.", "timestamp": "2022-09-15 09:46:23", "update_id": 447569, "user_id": 118, "id": 2717552, "testcase_feedback": [{"karma": 0, "comment_id": 2717552, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "asn", "email": "asn@redhat.com", "id": 118, "avatar": "https://seccdn.libravatar.org/avatar/7923aade18dd01be2938d699b7d155a5e97c09d3b80126c9b9163d5be54384ab?s=24&d=retro", "openid": "asn.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}, {"name": "gitosutil"}, {"name": "svnpki"}]}}}]}, {"bug_id": 2126548, "title": "samba-4.17.0 is available", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 2716216, "bug_id": 2126548, "comment": {"karma": 0, "karma_critpath": 0, "text": "This package update cannot be pushed to testing because it needs FreeIPA rebuild. ", "timestamp": "2022-09-14 09:49:27", "update_id": 447569, "user_id": 1242, "id": 2716216, "testcase_feedback": [{"karma": 0, "comment_id": 2716216, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716220, "bug_id": 2126548, "comment": {"karma": 0, "karma_critpath": 0, "text": "I am rebuilding FreeIPA and will add to this update.", "timestamp": "2022-09-14 09:58:47", "update_id": 447569, "user_id": 1242, "id": 2716220, "testcase_feedback": [{"karma": 0, "comment_id": 2716220, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716923, "bug_id": 2126548, "comment": {"karma": -1, "karma_critpath": 0, "text": "It's still missing something; when we install the `freeipa-server` group, samba gets downgraded to 4.17.0-0.8.rc3.fc37 , which implies that something in the `freeipa-server` group and its deps needs rebuilding for the new samba. Not sure what yet.", "timestamp": "2022-09-14 22:41:56", "update_id": 447569, "user_id": 302, "id": 2716923, "testcase_feedback": [{"karma": 0, "comment_id": 2716923, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717012, "bug_id": 2126548, "comment": {"karma": 1, "karma_critpath": 0, "text": "Hum. That's an odd one, because I couldn't reproduce it locally in a mock, and if I make the test pass `--best` it stops happening and the test passes. So not quite sure what's going OK, but it looks like it would actually be OK if this got pushed stable and rc3 went away.\n\n@asn , next time, if you can, please check with me before waiving results. The failures weren't exactly irrelevant. What openQA is doing there is: first it checks which (if any) binary packages that are part of the update were installed during the test, and then for all the ones that were installed, it checks the version installed was the version from the update. Usually, if we find an older version than the one in the update is installed, that means there's a dependency problem in the update that needs to be resolved.", "timestamp": "2022-09-15 00:51:39", "update_id": 447569, "user_id": 302, "id": 2717012, "testcase_feedback": [{"karma": 0, "comment_id": 2717012, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717479, "bug_id": 2126548, "comment": {"karma": 1, "karma_critpath": 0, "text": "Test ipa server+replica install with CA, KRA, DNS. The update is functional", "timestamp": "2022-09-15 08:37:56", "update_id": 447569, "user_id": 3071, "id": 2717479, "testcase_feedback": [{"karma": 0, "comment_id": 2717479, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}, {"karma": 0, "comment_id": 2717552, "bug_id": 2126548, "comment": {"karma": 0, "karma_critpath": 0, "text": "Does freeipa require a fixed Samba version? Do we always need to rebuild freeipa, it is totally unclear why this would need rebuilding as changes between the rc and final are code fixes and not ABI or API changes.", "timestamp": "2022-09-15 09:46:23", "update_id": 447569, "user_id": 118, "id": 2717552, "testcase_feedback": [{"karma": 0, "comment_id": 2717552, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "asn", "email": "asn@redhat.com", "id": 118, "avatar": "https://seccdn.libravatar.org/avatar/7923aade18dd01be2938d699b7d155a5e97c09d3b80126c9b9163d5be54384ab?s=24&d=retro", "openid": "asn.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}, {"name": "gitosutil"}, {"name": "svnpki"}]}}}]}], "updateid": "FEDORA-2022-4555909843", "karma": 2, "content_type": "rpm", "test_cases": [{"name": "QA:Testcase desktop network smb", "id": 115}]}, "can_edit": false, "ci_allowed": false}