{"update": {"autokarma": false, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Security fix for CVE-2015-4000\r\n\r\nUpdate to the upstream NSS 3.19.1 release, which includes a fix for the recently published logjam attack.\r\n\r\nThe previous 3.19 release made several notable changes related to the TLS protocol, one of them was to disable the SSL 3 protocol by default.\r\n\r\nFor the full list of changes in the 3.19 and 3.19.1 releases, please refer to the upstream release notes documents:\r\n\r\nhttps://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes\r\n\r\nhttps://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19_release_notes\r\n", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": null, "close_bugs": true, "date_submitted": "2015-05-29 07:45:07", "date_modified": "2015-05-29 07:52:25", "date_approved": null, "date_testing": "2015-05-30 15:35:47", "date_stable": "2015-06-02 15:16:47", "alias": "FEDORA-2015-9048", "test_gating_status": null, "from_tag": null, "date_pushed": "2015-06-02 15:16:47", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2015-9048", "title": "nss-3.19.1-1.0.fc22 nss-softokn-3.19.1-1.0.fc22 nss-util-3.19.1-1.0.fc22", "version_hash": "2d6109cf78a7218308c0fc9f145c8e8a11f6b43c", "release": {"name": "F22", "long_name": "Fedora 22", "version": "22", "id_prefix": "FEDORA", "branch": "f22", "dist_tag": "f22", "stable_tag": "f22-updates", "testing_tag": "f22-updates-testing", "candidate_tag": "f22-updates-candidate", "pending_signing_tag": "", "pending_testing_tag": "f22-updates-testing-pending", "pending_stable_tag": "f22-updates-pending", "override_tag": "f22-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "kengert", "email": "kai-engert-fedora@kuix.de", "id": 1030, "avatar": "https://seccdn.libravatar.org/avatar/1f8015896a445a65769ff0da04232eeba4b2f70c4cc625310d621534ab032b1c?s=24&d=retro", "openid": "kengert.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by kengert. ", "timestamp": "2015-05-29 07:47:25", "update_id": 32117, "user_id": 91, "id": 263050, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Taskotron: depcheck test PASSED on i386. Result log:\nhttps://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/74499/steps/runtask/logs/stdio\n(results are informative only)", "timestamp": "2015-05-29 08:07:45", "update_id": 32117, "user_id": 100, "id": 263051, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taskotron", "email": "taskotron@fedoraproject.org", "id": 100, "avatar": "https://seccdn.libravatar.org/avatar/8cba34b3793397cca75782c70d6a4c3af6fc4c8e7d502fad36609e3b4b4670f9?s=24&d=retro", "openid": "taskotron.id.stg.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "Taskotron: depcheck test PASSED on x86_64. Result log:\nhttps://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/74499/steps/runtask/logs/stdio\n(results are informative only)", "timestamp": "2015-05-29 08:11:12", "update_id": 32117, "user_id": 100, "id": 263052, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taskotron", "email": "taskotron@fedoraproject.org", "id": 100, "avatar": "https://seccdn.libravatar.org/avatar/8cba34b3793397cca75782c70d6a4c3af6fc4c8e7d502fad36609e3b4b4670f9?s=24&d=retro", "openid": "taskotron.id.stg.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update is currently being pushed to the Fedora 22 testing updates repository.", "timestamp": "2015-05-29 19:48:53", "update_id": 32117, "user_id": 91, "id": 263053, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing", "timestamp": "2015-05-30 15:35:47", "update_id": 32117, "user_id": 91, "id": 263054, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2015-05-31 23:59:14", "update_id": 32117, "user_id": 194, "id": 263055, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "dhgutteridge", "email": "dhgutteridge@hotmail.com", "id": 194, "avatar": "https://seccdn.libravatar.org/avatar/95e7a46aa03707373935111628c2b387339f570b9175d20455a53fd00acafbcb?s=24&d=retro", "openid": "dhgutteridge.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}]}}, {"karma": 1, "karma_critpath": 0, "text": "The fix for Logjam works.", "timestamp": "2015-06-01 07:35:52", "update_id": 32117, "user_id": 373, "id": 263056, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "jvcelak", "email": "jv+fedora@fcelda.cz", "id": 373, "avatar": "https://seccdn.libravatar.org/avatar/5c2b78acfeef10c6f12ed3da2dac3c700c6ea2cf027c9a9d3a878c6c4af03c00?s=24&d=retro", "openid": "jvcelak.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Critical path update approved", "timestamp": "2015-06-01 07:35:55", "update_id": 32117, "user_id": 91, "id": 263057, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by emaldonado. ", "timestamp": "2015-06-01 17:18:41", "update_id": 32117, "user_id": 91, "id": 263058, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Taskotron: upgradepath test FAILED on noarch. Result log:\nhttps://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/75312/steps/runtask/logs/stdio\n(results are informative only)", "timestamp": "2015-06-01 17:25:54", "update_id": 32117, "user_id": 100, "id": 263059, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taskotron", "email": "taskotron@fedoraproject.org", "id": 100, "avatar": "https://seccdn.libravatar.org/avatar/8cba34b3793397cca75782c70d6a4c3af6fc4c8e7d502fad36609e3b4b4670f9?s=24&d=retro", "openid": "taskotron.id.stg.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "Automatic push to stable based on karma has been disabled for this update due to failure of an AutoQA test. Update submitter, please check the AutoQA test result and see if there is a valid problem to be fixed here, and fix it if so. If the failure is a mistake on AutoQA's part, you can re-enable the automatic push feature for this update if you like, or push it stable manually once it reaches the requirements under the Updates Policy.", "timestamp": "2015-06-01 17:25:56", "update_id": 32117, "user_id": 91, "id": 263060, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update is currently being pushed to the Fedora 22 stable updates repository.", "timestamp": "2015-06-01 20:25:07", "update_id": 32117, "user_id": 91, "id": 263061, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable", "timestamp": "2015-06-02 15:16:47", "update_id": 32117, "user_id": 91, "id": 263062, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "nss-3.19.1-1.0.fc22", "signed": true, "release_id": null, "type": "rpm", "epoch": 0}, {"nvr": "nss-softokn-3.19.1-1.0.fc22", "signed": true, "release_id": null, "type": "rpm", "epoch": 0}, {"nvr": "nss-util-3.19.1-1.0.fc22", "signed": true, "release_id": null, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1214732, "title": "nss-3.19.1 is available", "security": false, "parent": false, "feedback": []}, {"bug_id": 1223211, "title": "CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks", "security": true, "parent": true, "feedback": []}, {"bug_id": 1224448, "title": "CVE-2015-4000 nss: LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks [fedora-all]", "security": true, "parent": false, "feedback": []}], "updateid": "FEDORA-2015-9048", "karma": 2, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}