{"update": {"autokarma": false, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "QEMU heap overflow flaw while processing certain ATAPI commands.\n[XSA-138, CVE-2015-5154] (#1247142)\ntry again to fix xen-qemu-dom0-disk-backend.service (#1242246)\ncorrect qemu location in xen-qemu-dom0-disk-backend.service (#1242246),\nrebuild efi grub.cfg if it is present (#1239309),\nre-enable remus by building with libnl3,\nmodify gnutls use in line with Fedora's crypto policies (#1179352)", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2015-08-02 18:01:06", "date_modified": null, "date_approved": null, "date_testing": "2015-08-03 04:31:38", "date_stable": "2015-08-12 06:57:30", "alias": "FEDORA-2015-12657", "test_gating_status": null, "from_tag": null, "date_pushed": "2015-08-12 06:57:30", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2015-12657", "title": "xen-4.5.1-5.fc22", "version_hash": "589c426c1ae80665bd62431082cc6410a65be6a1", "release": {"name": "F22", "long_name": "Fedora 22", "version": "22", "id_prefix": "FEDORA", "branch": "f22", "dist_tag": "f22", "stable_tag": "f22-updates", "testing_tag": "f22-updates-testing", "candidate_tag": "f22-updates-candidate", "pending_signing_tag": "", "pending_testing_tag": "f22-updates-testing-pending", "pending_stable_tag": "f22-updates-pending", "override_tag": "f22-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "myoung", "email": "m.a.young@durham.ac.uk", "id": 129, "avatar": "https://seccdn.libravatar.org/avatar/cafef3050bdaacd4f890e9dfb2c45ae779cd95d6f836095f281368927146a63a?s=24&d=retro", "openid": "myoung.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by myoung. ", "timestamp": "2015-08-02 18:01:21", "update_id": 11578, "user_id": 91, "id": 83548, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Taskotron: depcheck test PASSED on i386. Result log:\nhttps://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/113106/steps/runtask/logs/stdio\n(results are informative only)", "timestamp": "2015-08-02 18:18:22", "update_id": 11578, "user_id": 100, "id": 83549, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taskotron", "email": "taskotron@fedoraproject.org", "id": 100, "avatar": "https://seccdn.libravatar.org/avatar/8cba34b3793397cca75782c70d6a4c3af6fc4c8e7d502fad36609e3b4b4670f9?s=24&d=retro", "openid": "taskotron.id.stg.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "Taskotron: depcheck test PASSED on x86_64. Result log:\nhttps://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/113106/steps/runtask/logs/stdio\n(results are informative only)", "timestamp": "2015-08-02 18:19:11", "update_id": 11578, "user_id": 100, "id": 83550, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taskotron", "email": "taskotron@fedoraproject.org", "id": 100, "avatar": "https://seccdn.libravatar.org/avatar/8cba34b3793397cca75782c70d6a4c3af6fc4c8e7d502fad36609e3b4b4670f9?s=24&d=retro", "openid": "taskotron.id.stg.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update is currently being pushed to the Fedora 22 testing updates repository.", "timestamp": "2015-08-02 18:57:55", "update_id": 11578, "user_id": 91, "id": 83551, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing", "timestamp": "2015-08-03 04:31:38", "update_id": 11578, "user_id": 91, "id": 83552, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "xen-qemu-dom0-disk-backend.service works fine now.", "timestamp": "2015-08-04 08:22:13", "update_id": 11578, "user_id": 1382, "id": 83553, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "lantw44", "email": "lantw44@gmail.com", "id": 1382, "avatar": "https://seccdn.libravatar.org/avatar/0257613b4d6cb305e28de351eb55b1bb5d3ec20ccbdcf5d0197cbcc37a6ea45b?s=24&d=retro", "openid": "lantw44.id.stg.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2015-08-10 06:57:04", "update_id": 11578, "user_id": 91, "id": 83554, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "seems allright", "timestamp": "2015-08-10 16:01:41", "update_id": 11578, "user_id": 739, "id": 83555, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by myoung. ", "timestamp": "2015-08-10 18:23:34", "update_id": 11578, "user_id": 91, "id": 83556, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Taskotron: upgradepath test PASSED on noarch. Result log:\nhttps://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/115320/steps/runtask/logs/stdio\n(results are informative only)", "timestamp": "2015-08-10 18:30:10", "update_id": 11578, "user_id": 100, "id": 83557, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taskotron", "email": "taskotron@fedoraproject.org", "id": 100, "avatar": "https://seccdn.libravatar.org/avatar/8cba34b3793397cca75782c70d6a4c3af6fc4c8e7d502fad36609e3b4b4670f9?s=24&d=retro", "openid": "taskotron.id.stg.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update is currently being pushed to the Fedora 22 stable updates repository.", "timestamp": "2015-08-11 19:30:10", "update_id": 11578, "user_id": 91, "id": 83558, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable", "timestamp": "2015-08-12 06:57:30", "update_id": 11578, "user_id": 91, "id": 83559, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This doesn't fix xen grub entries for me - although on a non EFI system. No entries for xen are created", "timestamp": "2015-08-24 19:18:18", "update_id": 11578, "user_id": 207, "id": 314553, "bug_feedback": [{"karma": 0, "comment_id": 314553, "bug_id": 1247142, "bug": {"bug_id": 1247142, "title": "CVE-2015-5154 xen: qemu: ide: atapi: heap overflow during I/O buffer memory access [fedora-all]", "security": true, "parent": false}}, {"karma": -1, "comment_id": 314553, "bug_id": 1239309, "bug": {"bug_id": 1239309, "title": "xen package does not create new entry in  /boot/efi/EFI/fedora/grub.cfg", "security": false, "parent": false}}, {"karma": 0, "comment_id": 314553, "bug_id": 1242246, "bug": {"bug_id": 1242246, "title": "xen-qemu-dom0-disk-backend.service trys to run a non-existent executable", "security": false, "parent": false}}, {"karma": 0, "comment_id": 314553, "bug_id": 1243563, "bug": {"bug_id": 1243563, "title": "CVE-2015-5154 qemu: ide: atapi: heap overflow during I/O buffer memory access", "security": true, "parent": true}}, {"karma": 0, "comment_id": 314553, "bug_id": 1179352, "bug": {"bug_id": 1179352, "title": "Utilize system-wide crypto-policies", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "xen-4.5.1-5.fc22", "signed": true, "release_id": null, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1179352, "title": "Utilize system-wide crypto-policies", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 314553, "bug_id": 1179352, "comment": {"karma": 0, "karma_critpath": 0, "text": "This doesn't fix xen grub entries for me - although on a non EFI system. No entries for xen are created", "timestamp": "2015-08-24 19:18:18", "update_id": 11578, "user_id": 207, "id": 314553, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1239309, "title": "xen package does not create new entry in  /boot/efi/EFI/fedora/grub.cfg", "security": false, "parent": false, "feedback": [{"karma": -1, "comment_id": 314553, "bug_id": 1239309, "comment": {"karma": 0, "karma_critpath": 0, "text": "This doesn't fix xen grub entries for me - although on a non EFI system. No entries for xen are created", "timestamp": "2015-08-24 19:18:18", "update_id": 11578, "user_id": 207, "id": 314553, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1242246, "title": "xen-qemu-dom0-disk-backend.service trys to run a non-existent executable", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 314553, "bug_id": 1242246, "comment": {"karma": 0, "karma_critpath": 0, "text": "This doesn't fix xen grub entries for me - although on a non EFI system. No entries for xen are created", "timestamp": "2015-08-24 19:18:18", "update_id": 11578, "user_id": 207, "id": 314553, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1243563, "title": "CVE-2015-5154 qemu: ide: atapi: heap overflow during I/O buffer memory access", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 314223, "bug_id": 1243563, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me", "timestamp": "2015-08-23 15:07:47", "update_id": 12113, "user_id": 308, "id": 314223, "testcase_feedback": [], "user": {"name": "chr77", "email": "chr77@protonmail.com", "id": 308, "avatar": "https://seccdn.libravatar.org/avatar/c9ddae9d692ab2ea6cecd787db18332407bb29982c8a1eae39771bfb270b71fd?s=24&d=retro", "openid": "chr77.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 314553, "bug_id": 1243563, "comment": {"karma": 0, "karma_critpath": 0, "text": "This doesn't fix xen grub entries for me - although on a non EFI system. No entries for xen are created", "timestamp": "2015-08-24 19:18:18", "update_id": 11578, "user_id": 207, "id": 314553, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1247142, "title": "CVE-2015-5154 xen: qemu: ide: atapi: heap overflow during I/O buffer memory access [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 314553, "bug_id": 1247142, "comment": {"karma": 0, "karma_critpath": 0, "text": "This doesn't fix xen grub entries for me - although on a non EFI system. No entries for xen are created", "timestamp": "2015-08-24 19:18:18", "update_id": 11578, "user_id": 207, "id": 314553, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}]}], "updateid": "FEDORA-2015-12657", "karma": 2, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}