{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "- fix two security issues in shebang line parsing (CVE-2018-0502 CVE-2018-13259)\n", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2018-09-05 07:48:16", "date_modified": "2018-09-07 06:19:49", "date_approved": null, "date_testing": "2018-09-07 00:05:10", "date_stable": "2018-09-11 16:50:57", "alias": "FEDORA-2018-16bb8b00c5", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2018-09-11 16:50:57", "meets_testing_requirements": true, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2018-16bb8b00c5", "title": "zsh-5.5.1-2.fc28", "version_hash": "43697017058c645d2fefb1394986155adf055b64", "release": {"name": "F28", "long_name": "Fedora 28", "version": "28", "id_prefix": "FEDORA", "branch": "f28", "dist_tag": "f28", "stable_tag": "f28-updates", "testing_tag": "f28-updates-testing", "candidate_tag": "f28-updates-candidate", "pending_signing_tag": "f28-signing-pending", "pending_testing_tag": "f28-updates-testing-pending", "pending_stable_tag": "f28-updates-pending", "override_tag": "f28-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "kdudka", "email": "kdudka@redhat.com", "id": 576, "avatar": "https://seccdn.libravatar.org/avatar/81b8a3402cb4e17c69f622fa0a54731bb27b625f8fbd396a7583318619a15395?s=24&d=retro", "openid": "kdudka.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "gitcgt"}, {"name": "gitcsmock"}, {"name": "gitnsspem"}, {"name": "fedorabugs"}, {"name": "aufover"}, {"name": "gitcscppc"}, {"name": "signed_fpca"}, {"name": "ipausers"}, {"name": "gitcswrap"}, {"name": "gitcodescan-diff"}, {"name": "fedora-contributor"}, {"name": "openscanhub"}, {"name": "trust admins"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by kdudka. ", "timestamp": "2018-09-05 07:48:16", "update_id": 121996, "user_id": 91, "id": 829977, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "This works for me.  I verified that the issues in the two CVEs listed are fixed.", "timestamp": "2018-09-06 12:51:45", "update_id": 121996, "user_id": 682, "id": 830731, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "tibbs", "email": "j@tib.bs", "id": 682, "avatar": "https://seccdn.libravatar.org/avatar/2759d203ee6375cef2c792c306100be2b49e5c19b1ca3d970d190ae803c20b20?s=24&d=retro", "openid": "tibbs.id.stg.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "packaging-committee"}, {"name": "fedora-contributor"}, {"name": "gitfas"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "wikiadmin"}, {"name": "sysadmin-devel"}, {"name": "cvsadmin"}, {"name": "sysadmin-dba"}, {"name": "sysadmin-cvs"}, {"name": "sysadmin"}, {"name": "wikiedit"}, {"name": "signed_fpca"}, {"name": "cvsfedora"}, {"name": "gitkquotanotifier"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2018-09-07 00:08:44", "update_id": 121996, "user_id": 91, "id": 830939, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2018-09-07 00:09:11", "update_id": 121996, "user_id": 91, "id": 831012, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "kdudka edited this update.", "timestamp": "2018-09-07 06:19:48", "update_id": 121996, "user_id": 91, "id": 831218, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Resubmitting my positive karma with the two linked bugs checked off.", "timestamp": "2018-09-07 15:01:46", "update_id": 121996, "user_id": 682, "id": 831320, "bug_feedback": [{"karma": 1, "comment_id": 831320, "bug_id": 1626185, "bug": {"bug_id": 1626185, "title": "CVE-2018-13259 zsh: Improper handling of shebang line longer than 64 [fedora-all]", "security": true, "parent": false}}, {"karma": 1, "comment_id": 831320, "bug_id": 1626190, "bug": {"bug_id": 1626190, "title": "CVE-2018-0502 zsh: Improper parsing of the shebang line with special chars [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "tibbs", "email": "j@tib.bs", "id": 682, "avatar": "https://seccdn.libravatar.org/avatar/2759d203ee6375cef2c792c306100be2b49e5c19b1ca3d970d190ae803c20b20?s=24&d=retro", "openid": "tibbs.id.stg.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "packaging-committee"}, {"name": "fedora-contributor"}, {"name": "gitfas"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "wikiadmin"}, {"name": "sysadmin-devel"}, {"name": "cvsadmin"}, {"name": "sysadmin-dba"}, {"name": "sysadmin-cvs"}, {"name": "sysadmin"}, {"name": "wikiedit"}, {"name": "signed_fpca"}, {"name": "cvsfedora"}, {"name": "gitkquotanotifier"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2018-09-08 19:36:04", "update_id": 121996, "user_id": 739, "id": 831841, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "No issues found.", "timestamp": "2018-09-10 13:38:55", "update_id": 121996, "user_id": 536, "id": 832389, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "mhayden", "email": "mhayden@redhat.com", "id": 536, "avatar": "https://seccdn.libravatar.org/avatar/9f9c7ca41ea68469600931af4193d0dc1dcb47d3cdbd481fa39fbaae417f4f2f?s=24&d=retro", "openid": "mhayden.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "gitfedora-security-team"}, {"name": "aws-fedora-ci"}, {"name": "cloud-sig"}, {"name": "trust admins"}, {"name": "rhel-lightspeed"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for batched by bodhi. ", "timestamp": "2018-09-10 13:38:55", "update_id": 121996, "user_id": 91, "id": 832390, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2018-09-11 03:01:00", "update_id": 121996, "user_id": 91, "id": 832596, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Thank you for testing the update!", "timestamp": "2018-09-11 08:05:04", "update_id": 121996, "user_id": 576, "id": 832666, "bug_feedback": [{"karma": 0, "comment_id": 832666, "bug_id": 1626185, "bug": {"bug_id": 1626185, "title": "CVE-2018-13259 zsh: Improper handling of shebang line longer than 64 [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 832666, "bug_id": 1626190, "bug": {"bug_id": 1626190, "title": "CVE-2018-0502 zsh: Improper parsing of the shebang line with special chars [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "kdudka", "email": "kdudka@redhat.com", "id": 576, "avatar": "https://seccdn.libravatar.org/avatar/81b8a3402cb4e17c69f622fa0a54731bb27b625f8fbd396a7583318619a15395?s=24&d=retro", "openid": "kdudka.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "gitcgt"}, {"name": "gitcsmock"}, {"name": "gitnsspem"}, {"name": "fedorabugs"}, {"name": "aufover"}, {"name": "gitcscppc"}, {"name": "signed_fpca"}, {"name": "ipausers"}, {"name": "gitcswrap"}, {"name": "gitcodescan-diff"}, {"name": "fedora-contributor"}, {"name": "openscanhub"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2018-09-11 17:01:07", "update_id": 121996, "user_id": 91, "id": 833033, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "zsh-5.5.1-2.fc28", "signed": true, "release_id": 21, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1626185, "title": "CVE-2018-13259 zsh: Improper handling of shebang line longer than 64 [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 1, "comment_id": 831320, "bug_id": 1626185, "comment": {"karma": 1, "karma_critpath": 0, "text": "Resubmitting my positive karma with the two linked bugs checked off.", "timestamp": "2018-09-07 15:01:46", "update_id": 121996, "user_id": 682, "id": 831320, "testcase_feedback": [], "user": {"name": "tibbs", "email": "j@tib.bs", "id": 682, "avatar": "https://seccdn.libravatar.org/avatar/2759d203ee6375cef2c792c306100be2b49e5c19b1ca3d970d190ae803c20b20?s=24&d=retro", "openid": "tibbs.id.stg.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "packaging-committee"}, {"name": "fedora-contributor"}, {"name": "gitfas"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "wikiadmin"}, {"name": "sysadmin-devel"}, {"name": "cvsadmin"}, {"name": "sysadmin-dba"}, {"name": "sysadmin-cvs"}, {"name": "sysadmin"}, {"name": "wikiedit"}, {"name": "signed_fpca"}, {"name": "cvsfedora"}, {"name": "gitkquotanotifier"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 832666, "bug_id": 1626185, "comment": {"karma": 0, "karma_critpath": 0, "text": "Thank you for testing the update!", "timestamp": "2018-09-11 08:05:04", "update_id": 121996, "user_id": 576, "id": 832666, "testcase_feedback": [], "user": {"name": "kdudka", "email": "kdudka@redhat.com", "id": 576, "avatar": "https://seccdn.libravatar.org/avatar/81b8a3402cb4e17c69f622fa0a54731bb27b625f8fbd396a7583318619a15395?s=24&d=retro", "openid": "kdudka.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "gitcgt"}, {"name": "gitcsmock"}, {"name": "gitnsspem"}, {"name": "fedorabugs"}, {"name": "aufover"}, {"name": "gitcscppc"}, {"name": "signed_fpca"}, {"name": "ipausers"}, {"name": "gitcswrap"}, {"name": "gitcodescan-diff"}, {"name": "fedora-contributor"}, {"name": "openscanhub"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 842158, "bug_id": 1626185, "comment": {"karma": 0, "karma_critpath": 0, "text": "Thank you for testing the update!", "timestamp": "2018-10-01 08:43:03", "update_id": 121995, "user_id": 576, "id": 842158, "testcase_feedback": [], "user": {"name": "kdudka", "email": "kdudka@redhat.com", "id": 576, "avatar": "https://seccdn.libravatar.org/avatar/81b8a3402cb4e17c69f622fa0a54731bb27b625f8fbd396a7583318619a15395?s=24&d=retro", "openid": "kdudka.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "gitcgt"}, {"name": "gitcsmock"}, {"name": "gitnsspem"}, {"name": "fedorabugs"}, {"name": "aufover"}, {"name": "gitcscppc"}, {"name": "signed_fpca"}, {"name": "ipausers"}, {"name": "gitcswrap"}, {"name": "gitcodescan-diff"}, {"name": "fedora-contributor"}, {"name": "openscanhub"}, {"name": "trust admins"}]}}}]}, {"bug_id": 1626190, "title": "CVE-2018-0502 zsh: Improper parsing of the shebang line with special chars [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 1, "comment_id": 831320, "bug_id": 1626190, "comment": {"karma": 1, "karma_critpath": 0, "text": "Resubmitting my positive karma with the two linked bugs checked off.", "timestamp": "2018-09-07 15:01:46", "update_id": 121996, "user_id": 682, "id": 831320, "testcase_feedback": [], "user": {"name": "tibbs", "email": "j@tib.bs", "id": 682, "avatar": "https://seccdn.libravatar.org/avatar/2759d203ee6375cef2c792c306100be2b49e5c19b1ca3d970d190ae803c20b20?s=24&d=retro", "openid": "tibbs.id.stg.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "packaging-committee"}, {"name": "fedora-contributor"}, {"name": "gitfas"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "wikiadmin"}, {"name": "sysadmin-devel"}, {"name": "cvsadmin"}, {"name": "sysadmin-dba"}, {"name": "sysadmin-cvs"}, {"name": "sysadmin"}, {"name": "wikiedit"}, {"name": "signed_fpca"}, {"name": "cvsfedora"}, {"name": "gitkquotanotifier"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 832666, "bug_id": 1626190, "comment": {"karma": 0, "karma_critpath": 0, "text": "Thank you for testing the update!", "timestamp": "2018-09-11 08:05:04", "update_id": 121996, "user_id": 576, "id": 832666, "testcase_feedback": [], "user": {"name": "kdudka", "email": "kdudka@redhat.com", "id": 576, "avatar": "https://seccdn.libravatar.org/avatar/81b8a3402cb4e17c69f622fa0a54731bb27b625f8fbd396a7583318619a15395?s=24&d=retro", "openid": "kdudka.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "gitcgt"}, {"name": "gitcsmock"}, {"name": "gitnsspem"}, {"name": "fedorabugs"}, {"name": "aufover"}, {"name": "gitcscppc"}, {"name": "signed_fpca"}, {"name": "ipausers"}, {"name": "gitcswrap"}, {"name": "gitcodescan-diff"}, {"name": "fedora-contributor"}, {"name": "openscanhub"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 842158, "bug_id": 1626190, "comment": {"karma": 0, "karma_critpath": 0, "text": "Thank you for testing the update!", "timestamp": "2018-10-01 08:43:03", "update_id": 121995, "user_id": 576, "id": 842158, "testcase_feedback": [], "user": {"name": "kdudka", "email": "kdudka@redhat.com", "id": 576, "avatar": "https://seccdn.libravatar.org/avatar/81b8a3402cb4e17c69f622fa0a54731bb27b625f8fbd396a7583318619a15395?s=24&d=retro", "openid": "kdudka.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "gitcgt"}, {"name": "gitcsmock"}, {"name": "gitnsspem"}, {"name": "fedorabugs"}, {"name": "aufover"}, {"name": "gitcscppc"}, {"name": "signed_fpca"}, {"name": "ipausers"}, {"name": "gitcswrap"}, {"name": "gitcodescan-diff"}, {"name": "fedora-contributor"}, {"name": "openscanhub"}, {"name": "trust admins"}]}}}]}], "updateid": "FEDORA-2018-16bb8b00c5", "karma": 3, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}