{"update": {"autokarma": true, "autotime": false, "stable_karma": 1, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Update runtime packages to include latest F29 updates.\n", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2019-02-23 21:19:01", "date_modified": null, "date_approved": null, "date_testing": "2019-02-24 02:26:32", "date_stable": "2019-02-27 01:06:14", "alias": "FEDORA-FLATPAK-2019-4fd2dcf159", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2019-02-27 01:06:14", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-FLATPAK-2019-4fd2dcf159", "title": "flatpak-runtime-f29-2920190117185057.1", "version_hash": "c399f6465df90eb8cddc738e631541b347d82d72", "release": {"name": "F29F", "long_name": "Fedora 29 Flatpaks", "version": "29", "id_prefix": "FEDORA-FLATPAK", "branch": "f29", "dist_tag": "f29-flatpak", "stable_tag": "f29-flatpak-updates", "testing_tag": "f29-flatpak-updates-testing", "candidate_tag": "f29-flatpak-updates-candidate", "pending_signing_tag": "", "pending_testing_tag": "f29-flatpak-updates-testing-pending", "pending_stable_tag": "f29-flatpak-updates-pending", "override_tag": "f29-flatpak-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "otaylor", "email": "otaylor@redhat.com", "id": 1039, "avatar": "https://seccdn.libravatar.org/avatar/407bd6b1c26601547f8e8dca44e191ddf414516a9536d822400bfab5ddc4ba69?s=24&d=retro", "openid": "otaylor.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "modularity-wg"}, {"name": "gitdesktop-effects"}, {"name": "flatpak-sig"}, {"name": "trust admins"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by otaylor. ", "timestamp": "2019-02-23 21:19:01", "update_id": 132294, "user_id": 91, "id": 899072, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2019-02-24 02:26:34", "update_id": 132294, "user_id": 91, "id": 899129, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "hallo @otaylor\n\nis this tagged as 'security' update because of CVE-2019-8308?", "timestamp": "2019-02-25 09:11:28", "update_id": 132294, "user_id": 4744, "id": 899847, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bynt", "email": "void+fedoraproject@bynt.de", "id": 4744, "avatar": "https://seccdn.libravatar.org/avatar/2619d4540f865a47f585aa7cedf4f115810b2f450ed625ae0eb9f866ee61cfa0?s=24&d=retro", "openid": "bynt.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Installed this as a dependency on Thunderbird, and works well.", "timestamp": "2019-02-26 12:39:59", "update_id": 132294, "user_id": 1442, "id": 900517, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "andreasn", "email": "anilsson@redhat.com", "id": 1442, "avatar": "https://seccdn.libravatar.org/avatar/530b893ceb0e216d21d854ba8e5324f918d4931841332f6f92661671947e94c0?s=24&d=retro", "openid": "andreasn.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for batched by bodhi. ", "timestamp": "2019-02-26 12:40:00", "update_id": 132294, "user_id": 91, "id": 900518, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This is tagged as security, because this version of the Flatpak runtime container, as compared to the latest released version, it contains subpackages of the following packages with security updates:\n\n * cups: https://bodhi.fedoraproject.org/updates/FEDORA-2018-09b23ed9e5\n * curl: https://bodhi.fedoraproject.org/updates/FEDORA-2019-43489941ff\n * curl: https://bodhi.fedoraproject.org/updates/FEDORA-2019-427a0ba9e3\n * glibc: https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6b7df660d\n * gnutls: https://bodhi.fedoraproject.org/updates/FEDORA-2019-99eefddc65\n * gnutls: https://bodhi.fedoraproject.org/updates/FEDORA-2018-79f7540a1e\n * systemd: https://bodhi.fedoraproject.org/updates/FEDORA-2019-8434288a24\n * systemd: https://bodhi.fedoraproject.org/updates/FEDORA-2019-1fb1547321\n * systemd: https://bodhi.fedoraproject.org/updates/FEDORA-2019-18b3a10c7f\n * webkit2gtk3: https://bodhi.fedoraproject.org/updates/FEDORA-2019-d645f4337d\n * webkit2gtk3: https://bodhi.fedoraproject.org/updates/FEDORA-2018-1a8582a7ee\n\nThese are almost certainly *not* all relevant in the Flatpak context (especially the systemd ones) - would need to analyze both the included subpackages and the content of those security updates to figure out what are the relevant CVEs.\n\n(This went a long time without a rebuild - in general, we'll plan on much more frequent rebuilds of the runtime to pick up security fixes.)", "timestamp": "2019-02-26 13:00:11", "update_id": 132294, "user_id": 1039, "id": 900536, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "otaylor", "email": "otaylor@redhat.com", "id": 1039, "avatar": "https://seccdn.libravatar.org/avatar/407bd6b1c26601547f8e8dca44e191ddf414516a9536d822400bfab5ddc4ba69?s=24&d=retro", "openid": "otaylor.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "modularity-wg"}, {"name": "gitdesktop-effects"}, {"name": "flatpak-sig"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "OK, thanks for the clarification. fyi: CVE-2019-8308 is in Flatpak itself, not in the Fedora Flatpak runtimes so there was no need to bring it up here. Sorry for the noise!", "timestamp": "2019-02-26 14:24:20", "update_id": 132294, "user_id": 4744, "id": 900552, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bynt", "email": "void+fedoraproject@bynt.de", "id": 4744, "avatar": "https://seccdn.libravatar.org/avatar/2619d4540f865a47f585aa7cedf4f115810b2f450ed625ae0eb9f866ee61cfa0?s=24&d=retro", "openid": "bynt.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2019-02-26 23:46:52", "update_id": 132294, "user_id": 91, "id": 900717, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2019-02-27 01:06:16", "update_id": 132294, "user_id": 91, "id": 900739, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "flatpak-runtime-f29-2920190117185057.1", "signed": true, "release_id": 27, "type": "flatpak"}], "bugs": [], "updateid": "FEDORA-FLATPAK-2019-4fd2dcf159", "karma": 1, "content_type": "flatpak", "test_cases": []}, "can_edit": false, "ci_allowed": false}