{"update": {"autokarma": true, "autotime": false, "stable_karma": 10, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "This update provides new upstream release OpenSSH 7.6 with several bug fixes and new features, including CVE-2017-15906, compatibility with WinSCP, improvement for PAM stack, enablement for s390x sandbox, new GSSAPI key exchange methods and improvement of handling kerberos tickets.", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-11-22 09:05:10", "date_modified": null, "date_approved": null, "date_testing": "2017-11-22 20:44:53", "date_stable": "2017-12-10 03:53:15", "alias": "FEDORA-2017-96d1995b70", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-12-10 03:53:15", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2017-96d1995b70", "title": "openssh-7.6p1-2.fc27", "version_hash": "470a1e6e17b281982cef637cc16852f9a7fad845", "release": {"name": "F27", "long_name": "Fedora 27", "version": "27", "id_prefix": "FEDORA", "branch": "f27", "dist_tag": "f27", "stable_tag": "f27-updates", "testing_tag": "f27-updates-testing", "candidate_tag": "f27-updates-candidate", "pending_signing_tag": "f27-signing-pending", "pending_testing_tag": "f27-updates-testing-pending", "pending_stable_tag": "f27-updates-pending", "override_tag": "f27-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "jjelen", "email": "jjelen@redhat.com", "id": 1178, "avatar": "https://seccdn.libravatar.org/avatar/148def0f2ca15284cb1cf58ff223f5754929b232f2f893ee8da4d0341a395ca6?s=24&d=retro", "openid": "jjelen.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "crypto-team"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by jjelen. ", "timestamp": "2017-11-22 09:05:10", "update_id": 102876, "user_id": 91, "id": 698962, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-11-22 21:43:59", "update_id": 102876, "user_id": 91, "id": 699343, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works great!  LGTM!  =)", "timestamp": "2017-11-23 10:48:40", "update_id": 102876, "user_id": 206, "id": 699544, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "besser82", "email": "besser82.fpo@gmail.com", "id": 206, "avatar": "https://seccdn.libravatar.org/avatar/28bacfa3be75032390ac2c7a34599aeb825c3b62b2c55ef64821d2fc023b56cb?s=24&d=retro", "openid": "besser82.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "designteam"}, {"name": "shogun-ca"}, {"name": "alt-gtk-de-sig"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "No regressions.", "timestamp": "2017-11-23 22:46:36", "update_id": 102876, "user_id": 198, "id": 699769, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 1, "karma_critpath": 0, "text": "All good", "timestamp": "2017-11-24 11:25:24", "update_id": 102876, "user_id": 2240, "id": 699842, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "frantisekz", "email": "fzatlouk@redhat.com", "id": 2240, "avatar": "https://seccdn.libravatar.org/avatar/665c5bc41bed444bc5fc8ea32da393449791968f9398dbe8ca045576e0ec52d3?s=24&d=retro", "openid": "frantisekz.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "qa"}, {"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "sysadmin"}, {"name": "ambassadors"}, {"name": "sysadmin-qa"}, {"name": "advocates"}, {"name": "qa-admin"}]}}, {"karma": 1, "karma_critpath": 0, "text": "no regressions, pass both test cases :P", "timestamp": "2017-11-24 13:29:53", "update_id": 102876, "user_id": 3278, "id": 699894, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bt0dotninja", "email": "hotgalan@gmail.com", "id": 3278, "avatar": "https://seccdn.libravatar.org/avatar/c60ab53f3bfe23061b21fd0bd0b53fe94c3322dfc6dc4a7d8d04f7d8efd098f8?s=24&d=retro", "openid": "bt0dotninja.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "fedora-contributor"}, {"name": "dotnet-team"}, {"name": "marketing"}, {"name": "mindshare"}, {"name": "council"}, {"name": "diversity-team"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "commops"}, {"name": "ask-fedora"}, {"name": "fedora-join"}, {"name": "wikiedit"}, {"name": "signed_fpca"}, {"name": "summer-coding"}, {"name": "fedora-mx"}, {"name": "advocates"}, {"name": "ambassadors"}, {"name": "ipausers"}]}}, {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2017-11-25 18:41:34", "update_id": 102876, "user_id": 125, "id": 700594, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "yuwata", "email": "yuwatana@redhat.com", "id": 125, "avatar": "https://seccdn.libravatar.org/avatar/09d97054a1ae694346000a642b10639ee485b8a9254bca065f3c82df522cc811?s=24&d=retro", "openid": "yuwata.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}, {"karma": 1, "karma_critpath": 1, "text": "Works for me.", "timestamp": "2017-11-26 11:45:33", "update_id": 102876, "user_id": 2878, "id": 700761, "bug_feedback": [{"karma": 0, "comment_id": 700761, "bug_id": 1492313, "bug": {"bug_id": 1492313, "title": "sshd doesnt use pam auth stack anymore", "security": false, "parent": false}}, {"karma": 0, "comment_id": 700761, "bug_id": 1477636, "bug": {"bug_id": 1477636, "title": "Fedora - OpenSSH: Add enablement for openssl-ibmca and openssl-ibmpkcs11 (security/crypto)", "security": false, "parent": false}}, {"karma": 0, "comment_id": 700761, "bug_id": 1199363, "bug": {"bug_id": 1199363, "title": "ssh login with credential forwarding gives me a subsidiary ccache; can't kinit to another user", "security": false, "parent": false}}, {"karma": 0, "comment_id": 700761, "bug_id": 1506631, "bug": {"bug_id": 1506631, "title": "CVE-2017-15906 openssh: Improper write operations in readonly mode allow for zero-length file creation [fedora-all]", "security": true, "parent": false}}, {"karma": 1, "comment_id": 700761, "bug_id": 1504403, "bug": {"bug_id": 1504403, "title": "openssh-7.6p1 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 700761, "bug_id": 1499057, "bug": {"bug_id": 1499057, "title": "WinSCP 5.1x.x erroneously forced to use a weaker key-exchange due to missing patch to OpenSSH compat.c", "security": false, "parent": false}}], "testcase_feedback": [{"karma": 0, "comment_id": 700761, "testcase_id": 1, "testcase": {"name": "QA:Testcase OpenSSH", "id": 1}}], "user": {"name": "vedranm", "email": "vedran@miletic.net", "id": 2878, "avatar": "https://seccdn.libravatar.org/avatar/c91b7c8ed3a6f2b1f515095f6f347858ff68e9fce70e9702d9b540e5fa0d8b5e?s=24&d=retro", "openid": "vedranm.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "scitech"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2017-11-27 21:31:07", "update_id": 102876, "user_id": 739, "id": 701322, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works for me", "timestamp": "2017-11-29 13:22:20", "update_id": 102876, "user_id": 3146, "id": 702831, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "gtwilliams", "email": "gtwilliams@gmail.com", "id": 3146, "avatar": "https://seccdn.libravatar.org/avatar/df8b0216e18b4d2b90389265af68e4d4bf6a302e7d01e80c03af11d761afe7c9?s=24&d=retro", "openid": "gtwilliams.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works", "timestamp": "2017-11-29 13:35:57", "update_id": 102876, "user_id": 491, "id": 702847, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "pwalter", "email": "walter.pete@yandex.com", "id": 491, "avatar": "https://seccdn.libravatar.org/avatar/20f7756718e08ef810fe23344dfdcafe17dfb277e2c27d5cbf81e35b66247795?s=24&d=retro", "openid": "pwalter.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "wfm", "timestamp": "2017-11-29 15:35:24", "update_id": 102876, "user_id": 107, "id": 702913, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "nb", "email": "nick@bebout.net", "id": 107, "avatar": "https://seccdn.libravatar.org/avatar/2f33ca167b8f6e7ea7105ea1bf90935ca81575d091e57607aa513cbb74420927?s=24&d=retro", "openid": "nb.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "sysadmin-main"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "wikiedit"}, {"name": "l10n"}, {"name": "sysadmin-logs"}, {"name": "gitfedora-web"}, {"name": "fi-apprentice"}, {"name": "admins"}, {"name": "magazine"}, {"name": "sysadmin-badges"}, {"name": "security-team"}, {"name": "sysadmin-noc"}, {"name": "sysadmin"}, {"name": "fedora-hams"}, {"name": "accounts"}, {"name": "sysadmin-web"}, {"name": "ambassadors"}, {"name": "videos"}, {"name": "irc-support-operators"}, {"name": "cvsl10n"}, {"name": "cvsfedora"}, {"name": "ipausers"}, {"name": "ambassadors-emeriti"}, {"name": "sysadmin-veteran"}, {"name": "wikiadmin"}, {"name": "designteam"}, {"name": "famsco"}, {"name": "signed_fpca"}, {"name": "qa"}, {"name": "mindshare"}, {"name": "sysadmin-devel"}, {"name": "respins-sig"}, {"name": "web"}, {"name": "3d-printing-sig"}, {"name": "freemedia"}, {"name": "campusambassadors"}, {"name": "hosted-content"}, {"name": "aws-infra"}, {"name": "certbot-sig"}, {"name": "sysadmin-dns"}, {"name": "sysadmin-hosted"}, {"name": "sysadmin-tools"}, {"name": "marketing"}, {"name": "sysadmin-test"}, {"name": "advocates"}, {"name": "letsencrypt"}, {"name": "sysadmin-paste"}, {"name": "commops"}, {"name": "dotnet-sig"}, {"name": "fedora-contributor"}, {"name": "sysadmin-keys"}, {"name": "communishift"}, {"name": "altvideos"}, {"name": "fedorabugs"}, {"name": "aws-master"}, {"name": "fedora-socialmedia"}, {"name": "gitlab-fedora-admin"}, {"name": "clamav"}, {"name": "trust admins"}, {"name": "aws"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for batched by bodhi. ", "timestamp": "2017-11-29 15:35:28", "update_id": 102876, "user_id": 91, "id": 702914, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2017-12-05 03:04:45", "update_id": 102876, "user_id": 91, "id": 704940, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-12-10 05:09:03", "update_id": 102876, "user_id": 91, "id": 706710, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "openssh-7.6p1-2.fc27", "signed": true, "release_id": 17, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1199363, "title": "ssh login with credential forwarding gives me a subsidiary ccache; can't kinit to another user", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 700761, "bug_id": 1199363, "comment": {"karma": 1, "karma_critpath": 1, "text": "Works for me.", "timestamp": "2017-11-26 11:45:33", "update_id": 102876, "user_id": 2878, "id": 700761, "testcase_feedback": [{"karma": 0, "comment_id": 700761, "testcase_id": 1, "testcase": {"name": "QA:Testcase OpenSSH", "id": 1}}], "user": {"name": "vedranm", "email": "vedran@miletic.net", "id": 2878, "avatar": "https://seccdn.libravatar.org/avatar/c91b7c8ed3a6f2b1f515095f6f347858ff68e9fce70e9702d9b540e5fa0d8b5e?s=24&d=retro", "openid": "vedranm.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "scitech"}, {"name": "trust admins"}]}}}]}, {"bug_id": 1477636, "title": "Fedora - OpenSSH: Add enablement for openssl-ibmca and openssl-ibmpkcs11 (security/crypto)", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 700761, "bug_id": 1477636, "comment": {"karma": 1, "karma_critpath": 1, "text": "Works for me.", "timestamp": "2017-11-26 11:45:33", "update_id": 102876, "user_id": 2878, "id": 700761, "testcase_feedback": [{"karma": 0, "comment_id": 700761, "testcase_id": 1, "testcase": {"name": "QA:Testcase OpenSSH", "id": 1}}], "user": {"name": "vedranm", "email": "vedran@miletic.net", "id": 2878, "avatar": "https://seccdn.libravatar.org/avatar/c91b7c8ed3a6f2b1f515095f6f347858ff68e9fce70e9702d9b540e5fa0d8b5e?s=24&d=retro", "openid": "vedranm.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "scitech"}, {"name": "trust admins"}]}}}]}, {"bug_id": 1492313, "title": "sshd doesnt use pam auth stack anymore", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 700761, "bug_id": 1492313, "comment": {"karma": 1, "karma_critpath": 1, "text": "Works for me.", "timestamp": "2017-11-26 11:45:33", "update_id": 102876, "user_id": 2878, "id": 700761, "testcase_feedback": [{"karma": 0, "comment_id": 700761, "testcase_id": 1, "testcase": {"name": "QA:Testcase OpenSSH", "id": 1}}], "user": {"name": "vedranm", "email": "vedran@miletic.net", "id": 2878, "avatar": "https://seccdn.libravatar.org/avatar/c91b7c8ed3a6f2b1f515095f6f347858ff68e9fce70e9702d9b540e5fa0d8b5e?s=24&d=retro", "openid": "vedranm.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "scitech"}, {"name": "trust admins"}]}}}]}, {"bug_id": 1499057, "title": "WinSCP 5.1x.x erroneously forced to use a weaker key-exchange due to missing patch to OpenSSH compat.c", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 700761, "bug_id": 1499057, "comment": {"karma": 1, "karma_critpath": 1, "text": "Works for me.", "timestamp": "2017-11-26 11:45:33", "update_id": 102876, "user_id": 2878, "id": 700761, "testcase_feedback": [{"karma": 0, "comment_id": 700761, "testcase_id": 1, "testcase": {"name": "QA:Testcase OpenSSH", "id": 1}}], "user": {"name": "vedranm", "email": "vedran@miletic.net", "id": 2878, "avatar": "https://seccdn.libravatar.org/avatar/c91b7c8ed3a6f2b1f515095f6f347858ff68e9fce70e9702d9b540e5fa0d8b5e?s=24&d=retro", "openid": "vedranm.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "scitech"}, {"name": "trust admins"}]}}}]}, {"bug_id": 1504403, "title": "openssh-7.6p1 is available", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 700761, "bug_id": 1504403, "comment": {"karma": 1, "karma_critpath": 1, "text": "Works for me.", "timestamp": "2017-11-26 11:45:33", "update_id": 102876, "user_id": 2878, "id": 700761, "testcase_feedback": [{"karma": 0, "comment_id": 700761, "testcase_id": 1, "testcase": {"name": "QA:Testcase OpenSSH", "id": 1}}], "user": {"name": "vedranm", "email": "vedran@miletic.net", "id": 2878, "avatar": "https://seccdn.libravatar.org/avatar/c91b7c8ed3a6f2b1f515095f6f347858ff68e9fce70e9702d9b540e5fa0d8b5e?s=24&d=retro", "openid": "vedranm.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "scitech"}, {"name": "trust admins"}]}}}]}, {"bug_id": 1506631, "title": "CVE-2017-15906 openssh: Improper write operations in readonly mode allow for zero-length file creation [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 700761, "bug_id": 1506631, "comment": {"karma": 1, "karma_critpath": 1, "text": "Works for me.", "timestamp": "2017-11-26 11:45:33", "update_id": 102876, "user_id": 2878, "id": 700761, "testcase_feedback": [{"karma": 0, "comment_id": 700761, "testcase_id": 1, "testcase": {"name": "QA:Testcase OpenSSH", "id": 1}}], "user": {"name": "vedranm", "email": "vedran@miletic.net", "id": 2878, "avatar": "https://seccdn.libravatar.org/avatar/c91b7c8ed3a6f2b1f515095f6f347858ff68e9fce70e9702d9b540e5fa0d8b5e?s=24&d=retro", "openid": "vedranm.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "scitech"}, {"name": "trust admins"}]}}}]}], "updateid": "FEDORA-2017-96d1995b70", "karma": 10, "content_type": "rpm", "test_cases": [{"name": "QA:Testcase OpenSSH", "id": 1}]}, "can_edit": false, "ci_allowed": false}