{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "libvorbis 1.3.6. Fixes CVE-2018-5146.", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": null, "close_bugs": true, "date_submitted": "2018-03-16 18:02:21", "date_modified": null, "date_approved": null, "date_testing": "2018-03-17 20:37:25", "date_stable": "2018-03-20 18:11:51", "alias": "FEDORA-2018-061bafe369", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2018-03-20 18:11:51", "meets_testing_requirements": true, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2018-061bafe369", "title": "libvorbis-1.3.6-1.fc27", "version_hash": "c2d5b747c8bf9b8cbf313a3e6217ceebd31a1109", "release": {"name": "F27", "long_name": "Fedora 27", "version": "27", "id_prefix": "FEDORA", "branch": "f27", "dist_tag": "f27", "stable_tag": "f27-updates", "testing_tag": "f27-updates-testing", "candidate_tag": "f27-updates-candidate", "pending_signing_tag": "f27-signing-pending", "pending_testing_tag": "f27-updates-testing-pending", "pending_stable_tag": "f27-updates-pending", "override_tag": "f27-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "ajax", "email": "ajax@redhat.com", "id": 1040, "avatar": "https://seccdn.libravatar.org/avatar/3bbac52087a2c217c49bda6f9659351ec0e96a8271b26fcb917e3fe5200c4108?s=24&d=retro", "openid": "ajax.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}, {"name": "provenpackager"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by ajax. ", "timestamp": "2018-03-16 18:02:21", "update_id": 109883, "user_id": 91, "id": 746571, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "can you please update for Fedora 26, too?", "timestamp": "2018-03-17 14:19:53", "update_id": 109883, "user_id": 207, "id": 746845, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2018-03-17 20:39:55", "update_id": 109883, "user_id": 91, "id": 747000, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2018-03-18 12:36:16", "update_id": 109883, "user_id": 124, "id": 747198, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "filiperosset", "email": "rosset.filipe@gmail.com", "id": 124, "avatar": "https://seccdn.libravatar.org/avatar/f4394b8fb4c9a99c4b534dc724912fe75a5b87fe15048985ece8388c2441d0ca?s=24&d=retro", "openid": "filiperosset.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "trust admins"}, {"name": "signed_fpca"}, {"name": "fedora-contributor"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "ipausers"}, {"name": "fedora-br"}, {"name": "fedorabugs"}, {"name": "ambassadors"}]}}, {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2018-03-18 14:31:37", "update_id": 109883, "user_id": 739, "id": 747223, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2018-03-18 17:14:27", "update_id": 109883, "user_id": 182, "id": 747245, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "hreindl", "email": "h.reindl@thelounge.net", "id": 182, "avatar": "https://seccdn.libravatar.org/avatar/664e0d25c0404b7a153b4dbc5dc1f3d1be6a2e9fd91115fbb929fe16a55d21d7?s=24&d=retro", "openid": "hreindl.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for batched by bodhi. ", "timestamp": "2018-03-18 17:14:28", "update_id": 109883, "user_id": 91, "id": 747246, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 1, "text": "Works fine for me!", "timestamp": "2018-03-19 07:52:53", "update_id": 109883, "user_id": 1177, "id": 747632, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "jayjayjazz", "email": "jayjayjazz@gmail.com", "id": 1177, "avatar": "https://seccdn.libravatar.org/avatar/b7f3994e0ba48616a78257e2477c106613cb1d0802ef48790f7b51d4d7943211?s=24&d=retro", "openid": "jayjayjazz.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2018-03-20 03:09:30", "update_id": 109883, "user_id": 91, "id": 748750, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2018-03-20 18:24:52", "update_id": 109883, "user_id": 91, "id": 749347, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 1, "text": "Error: Transaction check error:\n  file /usr/share/licenses/libvorbis/COPYING from install of libvorbis-1:1.3.6-1.fc27.i686 conflicts with file from package libvorbis-1:1.3.5-4.fc27.x86_64\n\nError Summary\n-------------\n\n\nkarma: -1", "timestamp": "2018-03-21 14:35:04", "update_id": 109883, "user_id": 207, "id": 749961, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "@anonymous: as you can see the mirror dnf selected is lacking the x86_64 package in the newer version and so that is *not* a package problem at it's own - \"dnf clean all && dnf upgrade\" and hope dnf selects a proper one", "timestamp": "2018-03-21 14:47:14", "update_id": 109883, "user_id": 182, "id": 749972, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "hreindl", "email": "h.reindl@thelounge.net", "id": 182, "avatar": "https://seccdn.libravatar.org/avatar/664e0d25c0404b7a153b4dbc5dc1f3d1be6a2e9fd91115fbb929fe16a55d21d7?s=24&d=retro", "openid": "hreindl.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "@hreindl: Same result, no progress after applying your suggested fix. I tried removing the libvorbis package altogether but that involved removing almost all the fedora installation packages associated with it so that is out of the equation. I am padding all the log of the command as if, just if someone is running into my same dilemma.\n\n[user@localhost ~]$ sudo dnf clean all && dnf upgrade\n[sudo] password for user: \nRepository intellinuxgraphics has no mirror or baseurl set.\n150 files removed\nRepository intellinuxgraphics has no mirror or baseurl set.\nError: This command has to be run under the root user.\n[user@localhost ~]$ su\nPassword: \n[root@localhost user]# dnf clean all && dnf upgrade\nRepository intellinuxgraphics has no mirror or baseurl set.\n0 files removed\nRepository intellinuxgraphics has no mirror or baseurl set.\nnegativo17 - Multimedia                          127 kB/s | 810 kB     00:06    \nFedora 27 - x86_64 - Updates                     1.2 MB/s |  21 MB     00:17    \nFedora 27 - x86_64                               1.3 MB/s |  58 MB     00:43    \ngoogle-chrome                                     16 kB/s | 3.7 kB     00:00    \nRPM Fusion for Fedora 27 - Free - Updates         66 kB/s | 342 kB     00:05    \nRPM Fusion for Fedora 27 - Free                  462 kB/s | 717 kB     00:01    \nRPM Fusion for Fedora 27 - Nonfree - Updates     179 kB/s |  78 kB     00:00    \nRPM Fusion for Fedora 27 - Nonfree               113 kB/s | 163 kB     00:01    \nFailed to synchronize cache for repo 'fedora-HandBrake', disabling.\nLast metadata expiration check: 0:00:00 ago on Thu 22 Mar 2018 12:39:56 AM EDT.\nDependencies resolved.\n=================================================================================\n Package                   Arch        Version               Repository     Size\n=================================================================================\nInstalling:\n kernel-devel              x86_64      4.15.10-300.fc27      updates        12 M\nUpgrading:\n elfutils-libelf           i686        0.170-10.fc27         updates       212 k\n elfutils-libs             i686        0.170-10.fc27         updates       320 k\n libvorbis                 i686        1:1.3.6-1.fc27        updates       189 k\n pcre2                     i686        10.31-3.fc27          updates       239 k\nRemoving:\n kernel-core               x86_64      4.15.7-300.fc27       @updates       58 M\n kernel-devel              x86_64      4.15.7-300.fc27       @updates       44 M\nRemoving dependent packages:\n kernel                    x86_64      4.15.7-300.fc27       @updates        0  \n kernel-modules            x86_64      4.15.7-300.fc27       @updates       26 M\n kernel-modules-extra      x86_64      4.15.7-300.fc27       @updates      2.1 M\n\nTransaction Summary\n=================================================================================\nInstall  1 Package\nUpgrade  4 Packages\nRemove   5 Packages\n\nTotal download size: 13 M\nIs this ok [y/N]: y\nDownloading Packages:\n(1/5): elfutils-libelf-0.170-10.fc27.i686.rpm     37 kB/s | 212 kB     00:05    \n(2/5): elfutils-libs-0.170-10.fc27.i686.rpm       55 kB/s | 320 kB     00:05    \n(3/5): libvorbis-1.3.6-1.fc27.i686.rpm           826 kB/s | 189 kB     00:00    \n(4/5): pcre2-10.31-3.fc27.i686.rpm               740 kB/s | 239 kB     00:00    \n(5/5): kernel-devel-4.15.10-300.fc27.x86_64.rpm  998 kB/s |  12 MB     00:12    \n---------------------------------------------------------------------------------\nTotal                                            1.0 MB/s |  13 MB     00:13     \nRunning transaction check\nTransaction check succeeded.\nRunning transaction test\nThe downloaded packages were saved in cache until the next successful transaction.\nYou can remove cached packages by executing 'dnf clean packages'.\nError: Transaction check error:\n  file /usr/share/licenses/libvorbis/COPYING from install of libvorbis-1:1.3.6-1.fc27.i686 conflicts with file from package libvorbis-1:1.3.5-4.fc27.x86_64\n\nError Summary\n-------------\n\n[root@localhost user]# \n\n\nkarma: -1", "timestamp": "2018-03-22 04:48:13", "update_id": 109883, "user_id": 207, "id": 750410, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "@anonymous \"I tried removing the libvorbis package altogether but that involved removing almost all the fedora installation packages associated with it so that is out of the equation\" is NOT TRUE - \"rpm  -e --nodpes\" works fine for libraries not need from the coreos and rpm/dnf itself and than you do a ordinary \"dnf install\" and you are done - i resolved multilib issues that way a decade ago or even longer", "timestamp": "2018-03-22 11:31:01", "update_id": 109883, "user_id": 182, "id": 750537, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "hreindl", "email": "h.reindl@thelounge.net", "id": 182, "avatar": "https://seccdn.libravatar.org/avatar/664e0d25c0404b7a153b4dbc5dc1f3d1be6a2e9fd91115fbb929fe16a55d21d7?s=24&d=retro", "openid": "hreindl.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 1, "text": "@hreindl sudo rpm -e --nodeps libvorbis-1:1.3.5-4.fc27.x86_64 did the trick :) Thank You for your veteran advice kind sir ;)\n\nkarma: +1", "timestamp": "2018-03-23 03:21:26", "update_id": 109883, "user_id": 207, "id": 750944, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "libvorbis-1.3.6-1.fc27", "signed": true, "release_id": 17, "type": "rpm", "epoch": 1}], "bugs": [], "updateid": "FEDORA-2018-061bafe369", "karma": 4, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}