{"update": {"autokarma": true, "autotime": true, "stable_karma": 2, "stable_days": 14, "unstable_karma": -1, "require_bugs": false, "require_testcases": true, "display_name": "", "notes": "Automatic update for cockpit-314-1.fc40.\n\n##### **Changelog for cockpit**\n\n```\n* Thu Mar 28 2024 Packit <hello@packit.dev> - 314-1\n- Diagnostic reports: Fix command injection vulnerability with crafted report names\n- Storage: Improvements to read-only encrypted filesystems\n\n```\n\n", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "logout", "locked": false, "pushed": true, "critpath": true, "critpath_groups": "critical-path-anaconda critical-path-server", "close_bugs": true, "date_submitted": "2024-03-29 06:29:55", "date_modified": "2024-03-29 19:36:37", "date_approved": null, "date_testing": "2024-03-29 16:27:02", "date_stable": "2024-03-31 00:17:00", "alias": "FEDORA-2024-4e95f130fc", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2024-03-31 00:17:00", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-4e95f130fc", "title": "cockpit-314-1.fc40", "version_hash": "2a3869a72d64806925cf7157cbdf1bbee7b65c48", "release": {"name": "F40", "long_name": "Fedora 40", "version": "40", "id_prefix": "FEDORA", "branch": "f40", "dist_tag": "f40", "stable_tag": "f40-updates", "testing_tag": "f40-updates-testing", "candidate_tag": "f40-updates-candidate", "pending_signing_tag": "f40-signing-pending", "pending_testing_tag": "f40-updates-testing-pending", "pending_stable_tag": "f40-updates-pending", "override_tag": "f40-override", "mail_template": "fedora_errata_template", "state": "current", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-05-13", "setting_status": null}, "user": {"name": "packit", "email": "user-cont-team+packit-fas@redhat.com", "id": 6406, "avatar": "https://seccdn.libravatar.org/avatar/89c7891f6b2fd89e071b61fd0582f846380026f81a92cf5349cc101484b12d46?s=24&d=retro", "openid": "packit.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "centosproject-email-aliases"}, {"name": "git-packit-team"}, {"name": "sig-cloud"}, {"name": "bodhi_update_bots"}, {"name": "trust admins"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by packit. ", "timestamp": "2024-03-29 06:29:56", "update_id": 600800, "user_id": 91, "id": 3470073, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-03-29 06:30:00", "update_id": 600800, "user_id": 91, "id": 3470075, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-03-29 06:30:00", "update_id": 600800, "user_id": 91, "id": 3470074, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2024-03-29 07:50:22", "update_id": 600800, "user_id": 91, "id": 3470086, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2024-03-29 16:27:31", "update_id": 600800, "user_id": 91, "id": 3470362, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2024-03-29 17:03:41", "update_id": 600800, "user_id": 91, "id": 3470381, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "martinpitt edited this update.", "timestamp": "2024-03-29 19:15:19", "update_id": 600800, "user_id": 91, "id": 3470456, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-03-29 19:15:20", "update_id": 600800, "user_id": 91, "id": 3470457, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "upgrades, installs, works fine", "timestamp": "2024-03-29 19:18:32", "update_id": 600800, "user_id": 3506, "id": 3470458, "bug_feedback": [{"karma": 0, "comment_id": 3470458, "bug_id": 2271815, "bug": {"bug_id": 2271815, "title": "CVE-2024-2947 cockpit: command injection when deleting a sosreport with a crafted name [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [{"karma": 0, "comment_id": 3470458, "testcase_id": 522, "testcase": {"name": "QA:Testcase cockpit", "id": 522}}, {"karma": 0, "comment_id": 3470458, "testcase_id": 122, "testcase": {"name": "QA:Testcase realmd join cockpit", "id": 122}}], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "martinpitt edited this update.", "timestamp": "2024-03-29 19:36:37", "update_id": 600800, "user_id": 91, "id": 3470465, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2024-03-29 20:33:51", "update_id": 600800, "user_id": 91, "id": 3470491, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Working so far.", "timestamp": "2024-03-30 04:19:04", "update_id": 600800, "user_id": 4756, "id": 3470913, "bug_feedback": [{"karma": 0, "comment_id": 3470913, "bug_id": 2271614, "bug": {"bug_id": 2271614, "title": "CVE-2024-2947 cockpit: command injection when deleting a sosreport with a crafted name", "security": true, "parent": true}}, {"karma": 0, "comment_id": 3470913, "bug_id": 2271815, "bug": {"bug_id": 2271815, "title": "CVE-2024-2947 cockpit: command injection when deleting a sosreport with a crafted name [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [{"karma": 0, "comment_id": 3470913, "testcase_id": 522, "testcase": {"name": "QA:Testcase cockpit", "id": 522}}, {"karma": 0, "comment_id": 3470913, "testcase_id": 122, "testcase": {"name": "QA:Testcase realmd join cockpit", "id": 122}}], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2024-03-30 06:36:39", "update_id": 600800, "user_id": 91, "id": 3470951, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2024-03-30 06:39:18", "update_id": 600800, "user_id": 91, "id": 3470954, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by martinpitt. ", "timestamp": "2024-03-30 10:58:07", "update_id": 600800, "user_id": 91, "id": 3471007, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2024-03-31 00:18:11", "update_id": 600800, "user_id": 91, "id": 3471428, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "cockpit-314-1.fc40", "signed": true, "release_id": 76, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 2271614, "title": "CVE-2024-2947 cockpit: command injection when deleting a sosreport with a crafted name", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 3470460, "bug_id": 2271614, "comment": {"karma": 1, "karma_critpath": 0, "text": "updates, installs, runs fine", "timestamp": "2024-03-29 19:18:58", "update_id": 600799, "user_id": 3506, "id": 3470460, "testcase_feedback": [{"karma": 0, "comment_id": 3470460, "testcase_id": 522, "testcase": {"name": "QA:Testcase cockpit", "id": 522}}, {"karma": 0, "comment_id": 3470460, "testcase_id": 122, "testcase": {"name": "QA:Testcase realmd join cockpit", "id": 122}}], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3470913, "bug_id": 2271614, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working so far.", "timestamp": "2024-03-30 04:19:04", "update_id": 600800, "user_id": 4756, "id": 3470913, "testcase_feedback": [{"karma": 0, "comment_id": 3470913, "testcase_id": 522, "testcase": {"name": "QA:Testcase cockpit", "id": 522}}, {"karma": 0, "comment_id": 3470913, "testcase_id": 122, "testcase": {"name": "QA:Testcase realmd join cockpit", "id": 122}}], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}]}, {"bug_id": 2271815, "title": "CVE-2024-2947 cockpit: command injection when deleting a sosreport with a crafted name [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 3470458, "bug_id": 2271815, "comment": {"karma": 1, "karma_critpath": 0, "text": "upgrades, installs, works fine", "timestamp": "2024-03-29 19:18:32", "update_id": 600800, "user_id": 3506, "id": 3470458, "testcase_feedback": [{"karma": 0, "comment_id": 3470458, "testcase_id": 522, "testcase": {"name": "QA:Testcase cockpit", "id": 522}}, {"karma": 0, "comment_id": 3470458, "testcase_id": 122, "testcase": {"name": "QA:Testcase realmd join cockpit", "id": 122}}], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3470460, "bug_id": 2271815, "comment": {"karma": 1, "karma_critpath": 0, "text": "updates, installs, runs fine", "timestamp": "2024-03-29 19:18:58", "update_id": 600799, "user_id": 3506, "id": 3470460, "testcase_feedback": [{"karma": 0, "comment_id": 3470460, "testcase_id": 522, "testcase": {"name": "QA:Testcase cockpit", "id": 522}}, {"karma": 0, "comment_id": 3470460, "testcase_id": 122, "testcase": {"name": "QA:Testcase realmd join cockpit", "id": 122}}], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3470913, "bug_id": 2271815, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working so far.", "timestamp": "2024-03-30 04:19:04", "update_id": 600800, "user_id": 4756, "id": 3470913, "testcase_feedback": [{"karma": 0, "comment_id": 3470913, "testcase_id": 522, "testcase": {"name": "QA:Testcase cockpit", "id": 522}}, {"karma": 0, "comment_id": 3470913, "testcase_id": 122, "testcase": {"name": "QA:Testcase realmd join cockpit", "id": 122}}], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}]}], "updateid": "FEDORA-2024-4e95f130fc", "karma": 2, "content_type": "rpm", "test_cases": [{"name": "QA:Testcase cockpit", "id": 522}, {"name": "QA:Testcase realmd join cockpit", "id": 122}]}, "can_edit": false, "ci_allowed": false}