{"update": {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for samba-4.17.0-1.fc38.\n\n##### **Changelog**\n\n```\n* Tue Sep 13 2022 Andreas Schneider <asn@redhat.com> - 4.17.0-1\n- resolves: rhbz#2118818 - Update to version 4.17.0\n- resolves: rhbz#2121138 - Fix CVE-2022-32743\n- resolves: rhbz#2122650 - Fix CVE-2022-1615\n* Tue Sep 13 2022 Andreas Schneider <asn@redhat.com> - 4.17.0-0.11.rc5\n- resolves: rhbz#2093656 - Split out libnetapi(-devel) sub-packages\n- resolves: rhbz#2096405 - Add samba-usershare package\n\n```", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": null, "close_bugs": true, "date_submitted": "2022-09-13 19:45:49", "date_modified": null, "date_approved": null, "date_testing": "2022-09-13 19:50:21", "date_stable": "2022-09-13 19:52:15", "alias": "FEDORA-2022-a457400fcd", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2022-09-13 19:52:15", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2022-a457400fcd", "title": "samba-4.17.0-1.fc38", "version_hash": "195355304753a37567ee0df6d9fc526178d2001e", "release": {"name": "F38", "long_name": "Fedora 38", "version": "38", "id_prefix": "FEDORA", "branch": "f38", "dist_tag": "f38", "stable_tag": "f38-updates", "testing_tag": "f38-updates-testing", "candidate_tag": "f38-updates-candidate", "pending_signing_tag": "f38-signing-pending", "pending_testing_tag": "f38-updates-testing-pending", "pending_stable_tag": "f38-updates-pending", "override_tag": "f38-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2024-05-21", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "asn", "email": "asn@redhat.com", "id": 118, "avatar": "https://seccdn.libravatar.org/avatar/7923aade18dd01be2938d699b7d155a5e97c09d3b80126c9b9163d5be54384ab?s=24&d=retro", "openid": "asn.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}, {"name": "gitosutil"}, {"name": "svnpki"}, {"name": "multimedia-sig"}, {"name": "podengo"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2022-09-13 19:45:49", "update_id": 447342, "user_id": 91, "id": 2714764, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2022-09-13 19:50:21", "update_id": 447342, "user_id": 91, "id": 2714765, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2022-09-13 19:50:22", "update_id": 447342, "user_id": 91, "id": 2714766, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi", "timestamp": "2022-09-13 19:52:17", "update_id": 447342, "user_id": 91, "id": 2714770, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "samba-4.17.0-1.fc38", "signed": true, "release_id": 66, "type": "rpm", "epoch": 2}], "bugs": [{"bug_id": 2093656, "title": "When configuring wine to compile for 32 bit, the script can't find the libnetapi library", "security": false, "parent": false, "feedback": []}, {"bug_id": 2096405, "title": "Manual configuration in root partition required before Samba shares can be created", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 2716216, "bug_id": 2096405, "comment": {"karma": 0, "karma_critpath": 0, "text": "This package update cannot be pushed to testing because it needs FreeIPA rebuild. ", "timestamp": "2022-09-14 09:49:27", "update_id": 447569, "user_id": 1242, "id": 2716216, "testcase_feedback": [{"karma": 0, "comment_id": 2716216, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716220, "bug_id": 2096405, "comment": {"karma": 0, "karma_critpath": 0, "text": "I am rebuilding FreeIPA and will add to this update.", "timestamp": "2022-09-14 09:58:47", "update_id": 447569, "user_id": 1242, "id": 2716220, "testcase_feedback": [{"karma": 0, "comment_id": 2716220, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716923, "bug_id": 2096405, "comment": {"karma": -1, "karma_critpath": 0, "text": "It's still missing something; when we install the `freeipa-server` group, samba gets downgraded to 4.17.0-0.8.rc3.fc37 , which implies that something in the `freeipa-server` group and its deps needs rebuilding for the new samba. Not sure what yet.", "timestamp": "2022-09-14 22:41:56", "update_id": 447569, "user_id": 302, "id": 2716923, "testcase_feedback": [{"karma": 0, "comment_id": 2716923, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717012, "bug_id": 2096405, "comment": {"karma": 1, "karma_critpath": 0, "text": "Hum. That's an odd one, because I couldn't reproduce it locally in a mock, and if I make the test pass `--best` it stops happening and the test passes. So not quite sure what's going OK, but it looks like it would actually be OK if this got pushed stable and rc3 went away.\n\n@asn , next time, if you can, please check with me before waiving results. The failures weren't exactly irrelevant. What openQA is doing there is: first it checks which (if any) binary packages that are part of the update were installed during the test, and then for all the ones that were installed, it checks the version installed was the version from the update. Usually, if we find an older version than the one in the update is installed, that means there's a dependency problem in the update that needs to be resolved.", "timestamp": "2022-09-15 00:51:39", "update_id": 447569, "user_id": 302, "id": 2717012, "testcase_feedback": [{"karma": 0, "comment_id": 2717012, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717479, "bug_id": 2096405, "comment": {"karma": 1, "karma_critpath": 0, "text": "Test ipa server+replica install with CA, KRA, DNS. The update is functional", "timestamp": "2022-09-15 08:37:56", "update_id": 447569, "user_id": 3071, "id": 2717479, "testcase_feedback": [{"karma": 0, "comment_id": 2717479, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}, {"karma": 0, "comment_id": 2717552, "bug_id": 2096405, "comment": {"karma": 0, "karma_critpath": 0, "text": "Does freeipa require a fixed Samba version? Do we always need to rebuild freeipa, it is totally unclear why this would need rebuilding as changes between the rc and final are code fixes and not ABI or API changes.", "timestamp": "2022-09-15 09:46:23", "update_id": 447569, "user_id": 118, "id": 2717552, "testcase_feedback": [{"karma": 0, "comment_id": 2717552, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "asn", "email": "asn@redhat.com", "id": 118, "avatar": "https://seccdn.libravatar.org/avatar/7923aade18dd01be2938d699b7d155a5e97c09d3b80126c9b9163d5be54384ab?s=24&d=retro", "openid": "asn.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}, {"name": "gitosutil"}, {"name": "svnpki"}, {"name": "multimedia-sig"}, {"name": "podengo"}]}}}]}, {"bug_id": 2118818, "title": "samba-4.17.0rc5 is available", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 2716216, "bug_id": 2118818, "comment": {"karma": 0, "karma_critpath": 0, "text": "This package update cannot be pushed to testing because it needs FreeIPA rebuild. ", "timestamp": "2022-09-14 09:49:27", "update_id": 447569, "user_id": 1242, "id": 2716216, "testcase_feedback": [{"karma": 0, "comment_id": 2716216, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716220, "bug_id": 2118818, "comment": {"karma": 0, "karma_critpath": 0, "text": "I am rebuilding FreeIPA and will add to this update.", "timestamp": "2022-09-14 09:58:47", "update_id": 447569, "user_id": 1242, "id": 2716220, "testcase_feedback": [{"karma": 0, "comment_id": 2716220, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716923, "bug_id": 2118818, "comment": {"karma": -1, "karma_critpath": 0, "text": "It's still missing something; when we install the `freeipa-server` group, samba gets downgraded to 4.17.0-0.8.rc3.fc37 , which implies that something in the `freeipa-server` group and its deps needs rebuilding for the new samba. Not sure what yet.", "timestamp": "2022-09-14 22:41:56", "update_id": 447569, "user_id": 302, "id": 2716923, "testcase_feedback": [{"karma": 0, "comment_id": 2716923, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717012, "bug_id": 2118818, "comment": {"karma": 1, "karma_critpath": 0, "text": "Hum. That's an odd one, because I couldn't reproduce it locally in a mock, and if I make the test pass `--best` it stops happening and the test passes. So not quite sure what's going OK, but it looks like it would actually be OK if this got pushed stable and rc3 went away.\n\n@asn , next time, if you can, please check with me before waiving results. The failures weren't exactly irrelevant. What openQA is doing there is: first it checks which (if any) binary packages that are part of the update were installed during the test, and then for all the ones that were installed, it checks the version installed was the version from the update. Usually, if we find an older version than the one in the update is installed, that means there's a dependency problem in the update that needs to be resolved.", "timestamp": "2022-09-15 00:51:39", "update_id": 447569, "user_id": 302, "id": 2717012, "testcase_feedback": [{"karma": 0, "comment_id": 2717012, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717479, "bug_id": 2118818, "comment": {"karma": 1, "karma_critpath": 0, "text": "Test ipa server+replica install with CA, KRA, DNS. The update is functional", "timestamp": "2022-09-15 08:37:56", "update_id": 447569, "user_id": 3071, "id": 2717479, "testcase_feedback": [{"karma": 0, "comment_id": 2717479, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}, {"karma": 0, "comment_id": 2717552, "bug_id": 2118818, "comment": {"karma": 0, "karma_critpath": 0, "text": "Does freeipa require a fixed Samba version? Do we always need to rebuild freeipa, it is totally unclear why this would need rebuilding as changes between the rc and final are code fixes and not ABI or API changes.", "timestamp": "2022-09-15 09:46:23", "update_id": 447569, "user_id": 118, "id": 2717552, "testcase_feedback": [{"karma": 0, "comment_id": 2717552, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "asn", "email": "asn@redhat.com", "id": 118, "avatar": "https://seccdn.libravatar.org/avatar/7923aade18dd01be2938d699b7d155a5e97c09d3b80126c9b9163d5be54384ab?s=24&d=retro", "openid": "asn.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}, {"name": "gitosutil"}, {"name": "svnpki"}, {"name": "multimedia-sig"}, {"name": "podengo"}]}}}]}, {"bug_id": 2121138, "title": "CVE-2022-32743 samba: Validated dnsHostname write right needs to be implemented [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2716216, "bug_id": 2121138, "comment": {"karma": 0, "karma_critpath": 0, "text": "This package update cannot be pushed to testing because it needs FreeIPA rebuild. ", "timestamp": "2022-09-14 09:49:27", "update_id": 447569, "user_id": 1242, "id": 2716216, "testcase_feedback": [{"karma": 0, "comment_id": 2716216, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716220, "bug_id": 2121138, "comment": {"karma": 0, "karma_critpath": 0, "text": "I am rebuilding FreeIPA and will add to this update.", "timestamp": "2022-09-14 09:58:47", "update_id": 447569, "user_id": 1242, "id": 2716220, "testcase_feedback": [{"karma": 0, "comment_id": 2716220, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716923, "bug_id": 2121138, "comment": {"karma": -1, "karma_critpath": 0, "text": "It's still missing something; when we install the `freeipa-server` group, samba gets downgraded to 4.17.0-0.8.rc3.fc37 , which implies that something in the `freeipa-server` group and its deps needs rebuilding for the new samba. Not sure what yet.", "timestamp": "2022-09-14 22:41:56", "update_id": 447569, "user_id": 302, "id": 2716923, "testcase_feedback": [{"karma": 0, "comment_id": 2716923, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717012, "bug_id": 2121138, "comment": {"karma": 1, "karma_critpath": 0, "text": "Hum. That's an odd one, because I couldn't reproduce it locally in a mock, and if I make the test pass `--best` it stops happening and the test passes. So not quite sure what's going OK, but it looks like it would actually be OK if this got pushed stable and rc3 went away.\n\n@asn , next time, if you can, please check with me before waiving results. The failures weren't exactly irrelevant. What openQA is doing there is: first it checks which (if any) binary packages that are part of the update were installed during the test, and then for all the ones that were installed, it checks the version installed was the version from the update. Usually, if we find an older version than the one in the update is installed, that means there's a dependency problem in the update that needs to be resolved.", "timestamp": "2022-09-15 00:51:39", "update_id": 447569, "user_id": 302, "id": 2717012, "testcase_feedback": [{"karma": 0, "comment_id": 2717012, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717479, "bug_id": 2121138, "comment": {"karma": 1, "karma_critpath": 0, "text": "Test ipa server+replica install with CA, KRA, DNS. The update is functional", "timestamp": "2022-09-15 08:37:56", "update_id": 447569, "user_id": 3071, "id": 2717479, "testcase_feedback": [{"karma": 0, "comment_id": 2717479, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}, {"karma": 0, "comment_id": 2717552, "bug_id": 2121138, "comment": {"karma": 0, "karma_critpath": 0, "text": "Does freeipa require a fixed Samba version? Do we always need to rebuild freeipa, it is totally unclear why this would need rebuilding as changes between the rc and final are code fixes and not ABI or API changes.", "timestamp": "2022-09-15 09:46:23", "update_id": 447569, "user_id": 118, "id": 2717552, "testcase_feedback": [{"karma": 0, "comment_id": 2717552, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "asn", "email": "asn@redhat.com", "id": 118, "avatar": "https://seccdn.libravatar.org/avatar/7923aade18dd01be2938d699b7d155a5e97c09d3b80126c9b9163d5be54384ab?s=24&d=retro", "openid": "asn.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}, {"name": "gitosutil"}, {"name": "svnpki"}, {"name": "multimedia-sig"}, {"name": "podengo"}]}}}]}, {"bug_id": 2122650, "title": "CVE-2022-1615 samba: GnuTLS gnutls_rnd() can fail and give predictable random values [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2716216, "bug_id": 2122650, "comment": {"karma": 0, "karma_critpath": 0, "text": "This package update cannot be pushed to testing because it needs FreeIPA rebuild. ", "timestamp": "2022-09-14 09:49:27", "update_id": 447569, "user_id": 1242, "id": 2716216, "testcase_feedback": [{"karma": 0, "comment_id": 2716216, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716220, "bug_id": 2122650, "comment": {"karma": 0, "karma_critpath": 0, "text": "I am rebuilding FreeIPA and will add to this update.", "timestamp": "2022-09-14 09:58:47", "update_id": 447569, "user_id": 1242, "id": 2716220, "testcase_feedback": [{"karma": 0, "comment_id": 2716220, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "abbra", "email": "abokovoy@redhat.com", "id": 1242, "avatar": "https://seccdn.libravatar.org/avatar/3f3c51cb81fb43e685e65ff696d895ac268ff71949128c02b81dec65a4405a0a?s=24&d=retro", "openid": "abbra.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "bind-dyndb-ldap"}, {"name": "gitfreeipa"}, {"name": "gitslapi-nis"}, {"name": "gitfreeipa-docs"}]}}}, {"karma": 0, "comment_id": 2716923, "bug_id": 2122650, "comment": {"karma": -1, "karma_critpath": 0, "text": "It's still missing something; when we install the `freeipa-server` group, samba gets downgraded to 4.17.0-0.8.rc3.fc37 , which implies that something in the `freeipa-server` group and its deps needs rebuilding for the new samba. Not sure what yet.", "timestamp": "2022-09-14 22:41:56", "update_id": 447569, "user_id": 302, "id": 2716923, "testcase_feedback": [{"karma": 0, "comment_id": 2716923, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717012, "bug_id": 2122650, "comment": {"karma": 1, "karma_critpath": 0, "text": "Hum. That's an odd one, because I couldn't reproduce it locally in a mock, and if I make the test pass `--best` it stops happening and the test passes. So not quite sure what's going OK, but it looks like it would actually be OK if this got pushed stable and rc3 went away.\n\n@asn , next time, if you can, please check with me before waiving results. The failures weren't exactly irrelevant. What openQA is doing there is: first it checks which (if any) binary packages that are part of the update were installed during the test, and then for all the ones that were installed, it checks the version installed was the version from the update. Usually, if we find an older version than the one in the update is installed, that means there's a dependency problem in the update that needs to be resolved.", "timestamp": "2022-09-15 00:51:39", "update_id": 447569, "user_id": 302, "id": 2717012, "testcase_feedback": [{"karma": 0, "comment_id": 2717012, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2717479, "bug_id": 2122650, "comment": {"karma": 1, "karma_critpath": 0, "text": "Test ipa server+replica install with CA, KRA, DNS. The update is functional", "timestamp": "2022-09-15 08:37:56", "update_id": 447569, "user_id": 3071, "id": 2717479, "testcase_feedback": [{"karma": 0, "comment_id": 2717479, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}, {"karma": 0, "comment_id": 2717552, "bug_id": 2122650, "comment": {"karma": 0, "karma_critpath": 0, "text": "Does freeipa require a fixed Samba version? Do we always need to rebuild freeipa, it is totally unclear why this would need rebuilding as changes between the rc and final are code fixes and not ABI or API changes.", "timestamp": "2022-09-15 09:46:23", "update_id": 447569, "user_id": 118, "id": 2717552, "testcase_feedback": [{"karma": 0, "comment_id": 2717552, "testcase_id": 115, "testcase": {"name": "QA:Testcase desktop network smb", "id": 115}}], "user": {"name": "asn", "email": "asn@redhat.com", "id": 118, "avatar": "https://seccdn.libravatar.org/avatar/7923aade18dd01be2938d699b7d155a5e97c09d3b80126c9b9163d5be54384ab?s=24&d=retro", "openid": "asn.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}, {"name": "gitosutil"}, {"name": "svnpki"}, {"name": "multimedia-sig"}, {"name": "podengo"}]}}}]}], "updateid": "FEDORA-2022-a457400fcd", "karma": 0, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}