{"update": {"autokarma": false, "autotime": false, "stable_karma": 5, "stable_days": 14, "unstable_karma": -1, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Security fix for CVE-2021-3421, CVE-2021-20271 and CVE-2021-20266.", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": null, "close_bugs": false, "date_submitted": "2021-03-22 12:25:06", "date_modified": null, "date_approved": null, "date_testing": "2021-03-24 00:40:54", "date_stable": "2021-04-07 15:25:36", "alias": "FEDORA-2021-662680e477", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2021-04-07 15:25:36", "meets_testing_requirements": true, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2021-662680e477", "title": "rpm-4.15.1.1-1.fc32.1", "version_hash": "ea9a65a8754d4f20e8a8d2620a433ef71f25572e", "release": {"name": "F32", "long_name": "Fedora 32", "version": "32", "id_prefix": "FEDORA", "branch": "f32", "dist_tag": "f32", "stable_tag": "f32-updates", "testing_tag": "f32-updates-testing", "candidate_tag": "f32-updates-candidate", "pending_signing_tag": "f32-signing-pending", "pending_testing_tag": "f32-updates-testing-pending", "pending_stable_tag": "f32-updates-pending", "override_tag": "f32-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "pmatilai", "email": "pmatilai@redhat.com", "id": 1249, "avatar": "https://seccdn.libravatar.org/avatar/24120b3cce6986af4b154cf6cc85fa44ff132ee835c8975f24d6c2548506ff3d?s=24&d=retro", "openid": "pmatilai.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}, {"name": "gitrhrpmconfig"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by pmatilai. ", "timestamp": "2021-03-22 12:25:06", "update_id": 293789, "user_id": 91, "id": 1949344, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2021-03-22 12:25:07", "update_id": 293789, "user_id": 91, "id": 1949345, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2021-03-22 12:25:07", "update_id": 293789, "user_id": 91, "id": 1949346, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2021-03-22 12:59:07", "update_id": 293789, "user_id": 91, "id": 1949398, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2021-03-24 00:41:38", "update_id": 293789, "user_id": 91, "id": 1952721, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-04-06 15:33:43", "update_id": 293789, "user_id": 5615, "id": 1974262, "bug_feedback": [{"karma": 0, "comment_id": 1974262, "bug_id": 1927741, "bug": {"bug_id": 1927741, "title": "CVE-2021-20266 rpm: missing length checks in hdrblobInit()", "security": true, "parent": true}}, {"karma": 0, "comment_id": 1974262, "bug_id": 1927747, "bug": {"bug_id": 1927747, "title": "CVE-2021-3421 rpm: unsigned signature header leads to string injection into an rpm database", "security": true, "parent": true}}, {"karma": 0, "comment_id": 1974262, "bug_id": 1934125, "bug": {"bug_id": 1934125, "title": "CVE-2021-20271 rpm: Signature checks bypass via corrupted rpm package", "security": true, "parent": true}}, {"karma": 0, "comment_id": 1974262, "bug_id": 1938022, "bug": {"bug_id": 1938022, "title": "CVE-2021-20266 rpm: missing length checks in hdrblobInit() [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 1974262, "bug_id": 1938024, "bug": {"bug_id": 1938024, "title": "CVE-2021-3421 rpm: unsigned signature header leads to string injection into an rpm database [fedora-32]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 1974262, "bug_id": 1938027, "bug": {"bug_id": 1938027, "title": "CVE-2021-20271 rpm: Signature checks bypass via corrupted rpm package [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "ersen", "email": "oguz@ersen.moe", "id": 5615, "avatar": "https://seccdn.libravatar.org/avatar/b7a62226e7d88529ca69787274bacac45092c0f9bc56e521090d83f859529ce4?s=24&d=retro", "openid": "ersen.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "l10n"}, {"name": "fedora-join"}, {"name": "ask-fedora"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2021-04-07 00:43:20", "update_id": 293789, "user_id": 91, "id": 1974984, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by pmatilai. ", "timestamp": "2021-04-07 07:21:03", "update_id": 293789, "user_id": 91, "id": 1975300, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2021-04-07 15:26:26", "update_id": 293789, "user_id": 91, "id": 1976044, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "rpm-4.15.1.1-1.fc32.1", "signed": true, "release_id": 35, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1927741, "title": "CVE-2021-20266 rpm: missing length checks in hdrblobInit()", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 1957868, "bug_id": 1927741, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-26 19:51:20", "update_id": 293779, "user_id": 284, "id": 1957868, "testcase_feedback": [], "user": {"name": "cairo", "email": "hansmueller183@yahoo.com", "id": 284, "avatar": "https://seccdn.libravatar.org/avatar/65ac01c684e76450d8575348b4894728e9c69ffdbd7c08718a4156e8e0daf5b6?s=24&d=retro", "openid": "cairo.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 1974262, "bug_id": 1927741, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-04-06 15:33:43", "update_id": 293789, "user_id": 5615, "id": 1974262, "testcase_feedback": [], "user": {"name": "ersen", "email": "oguz@ersen.moe", "id": 5615, "avatar": "https://seccdn.libravatar.org/avatar/b7a62226e7d88529ca69787274bacac45092c0f9bc56e521090d83f859529ce4?s=24&d=retro", "openid": "ersen.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "l10n"}, {"name": "fedora-join"}, {"name": "ask-fedora"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1952457, "bug_id": 1927741, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-23 21:21:43", "update_id": 293780, "user_id": 4120, "id": 1952457, "testcase_feedback": [], "user": {"name": "atim", "email": "ego.cordatus@gmail.com", "id": 4120, "avatar": "https://seccdn.libravatar.org/avatar/8c3a317a13d88ca7421098b94cce0501c97ca2283e7139c4992df34f6218fb3b?s=24&d=retro", "openid": "atim.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "rust-sig"}]}}}, {"karma": 0, "comment_id": 1954028, "bug_id": 1927741, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2021-03-24 16:58:58", "update_id": 293779, "user_id": 2680, "id": 1954028, "testcase_feedback": [], "user": {"name": "thunderbirdtr", "email": "thunderbirdtr@gmail.com", "id": 2680, "avatar": "https://seccdn.libravatar.org/avatar/f8901e39b4af28d3baa96e3d3bccaea55053b809563cfed318e9e404e9cac4a8?s=24&d=retro", "openid": "thunderbirdtr.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "kde-sig"}, {"name": "videos"}, {"name": "designteam"}, {"name": "advocates"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "signed_fpca"}, {"name": "websites-apps"}, {"name": "fedora-contributor"}, {"name": "ipausers"}, {"name": "ambassadors"}, {"name": "altvideos"}, {"name": "fedorabugs"}, {"name": "mindshare"}, {"name": "asahi-sig"}, {"name": "discussion-mods-asahi"}, {"name": "ai-ml-sig"}, {"name": "pytorch-sig"}, {"name": "websites-apps-admin"}, {"name": "gitlab-fedora-aiml-developer"}]}}}, {"karma": 1, "comment_id": 1951565, "bug_id": 1927741, "comment": {"karma": 1, "karma_critpath": 0, "text": "Thanks you, Panu Matilainen!", "timestamp": "2021-03-23 13:46:49", "update_id": 293780, "user_id": 5985, "id": 1951565, "testcase_feedback": [], "user": {"name": "demiobenour", "email": "demiobenour@gmail.com", "id": 5985, "avatar": "https://seccdn.libravatar.org/avatar/1ede36dfb8f0ca6f45c38c274d56c75fd9f3276463cc32af2f51110fe2149a4c?s=24&d=retro", "openid": "demiobenour.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 1951723, "bug_id": 1927741, "comment": {"karma": 1, "karma_critpath": 0, "text": "Don't have handy tests for the CVEs, but the build is generally functional.", "timestamp": "2021-03-23 14:58:42", "update_id": 293780, "user_id": 2122, "id": 1951723, "testcase_feedback": [], "user": {"name": "bcotton", "email": "bcotton@funnelfiasco.com", "id": 2122, "avatar": "https://seccdn.libravatar.org/avatar/37e35e1343fe4a1eeaaedaca8917e05c6dfbfff08cfa8e906c2b21a1a280f274?s=24&d=retro", "openid": "bcotton.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "communishift"}, {"name": "wikiedit"}, {"name": "gitfedora-web"}, {"name": "advocates"}, {"name": "program-management"}]}}}, {"karma": 0, "comment_id": 1951737, "bug_id": 1927741, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-23 15:07:19", "update_id": 293780, "user_id": 5615, "id": 1951737, "testcase_feedback": [], "user": {"name": "ersen", "email": "oguz@ersen.moe", "id": 5615, "avatar": "https://seccdn.libravatar.org/avatar/b7a62226e7d88529ca69787274bacac45092c0f9bc56e521090d83f859529ce4?s=24&d=retro", "openid": "ersen.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "l10n"}, {"name": "fedora-join"}, {"name": "ask-fedora"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1960102, "bug_id": 1927741, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-28 17:28:22", "update_id": 293779, "user_id": 5881, "id": 1960102, "testcase_feedback": [], "user": {"name": "geraldosimiao", "email": "geraldo.simiao.kutz@gmail.com", "id": 5881, "avatar": "https://seccdn.libravatar.org/avatar/03fa5b58e8ac78544bf41ad8ecf9ee1920f2ebedb86542c2f4cdf7ef15813168?s=24&d=retro", "openid": "geraldosimiao.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "fedora-br"}, {"name": "advocates"}, {"name": "respins-sig"}]}}}]}, {"bug_id": 1927747, "title": "CVE-2021-3421 rpm: unsigned signature header leads to string injection into an rpm database", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 1957868, "bug_id": 1927747, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-26 19:51:20", "update_id": 293779, "user_id": 284, "id": 1957868, "testcase_feedback": [], "user": {"name": "cairo", "email": "hansmueller183@yahoo.com", "id": 284, "avatar": "https://seccdn.libravatar.org/avatar/65ac01c684e76450d8575348b4894728e9c69ffdbd7c08718a4156e8e0daf5b6?s=24&d=retro", "openid": "cairo.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 1974262, "bug_id": 1927747, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-04-06 15:33:43", "update_id": 293789, "user_id": 5615, "id": 1974262, "testcase_feedback": [], "user": {"name": "ersen", "email": "oguz@ersen.moe", "id": 5615, "avatar": "https://seccdn.libravatar.org/avatar/b7a62226e7d88529ca69787274bacac45092c0f9bc56e521090d83f859529ce4?s=24&d=retro", "openid": "ersen.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "l10n"}, {"name": "fedora-join"}, {"name": "ask-fedora"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1954028, "bug_id": 1927747, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2021-03-24 16:58:58", "update_id": 293779, "user_id": 2680, "id": 1954028, "testcase_feedback": [], "user": {"name": "thunderbirdtr", "email": "thunderbirdtr@gmail.com", "id": 2680, "avatar": "https://seccdn.libravatar.org/avatar/f8901e39b4af28d3baa96e3d3bccaea55053b809563cfed318e9e404e9cac4a8?s=24&d=retro", "openid": "thunderbirdtr.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "kde-sig"}, {"name": "videos"}, {"name": "designteam"}, {"name": "advocates"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "signed_fpca"}, {"name": "websites-apps"}, {"name": "fedora-contributor"}, {"name": "ipausers"}, {"name": "ambassadors"}, {"name": "altvideos"}, {"name": "fedorabugs"}, {"name": "mindshare"}, {"name": "asahi-sig"}, {"name": "discussion-mods-asahi"}, {"name": "ai-ml-sig"}, {"name": "pytorch-sig"}, {"name": "websites-apps-admin"}, {"name": "gitlab-fedora-aiml-developer"}]}}}, {"karma": 0, "comment_id": 1960102, "bug_id": 1927747, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-28 17:28:22", "update_id": 293779, "user_id": 5881, "id": 1960102, "testcase_feedback": [], "user": {"name": "geraldosimiao", "email": "geraldo.simiao.kutz@gmail.com", "id": 5881, "avatar": "https://seccdn.libravatar.org/avatar/03fa5b58e8ac78544bf41ad8ecf9ee1920f2ebedb86542c2f4cdf7ef15813168?s=24&d=retro", "openid": "geraldosimiao.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "fedora-br"}, {"name": "advocates"}, {"name": "respins-sig"}]}}}]}, {"bug_id": 1934125, "title": "CVE-2021-20271 rpm: Signature checks bypass via corrupted rpm package", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 1957868, "bug_id": 1934125, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-26 19:51:20", "update_id": 293779, "user_id": 284, "id": 1957868, "testcase_feedback": [], "user": {"name": "cairo", "email": "hansmueller183@yahoo.com", "id": 284, "avatar": "https://seccdn.libravatar.org/avatar/65ac01c684e76450d8575348b4894728e9c69ffdbd7c08718a4156e8e0daf5b6?s=24&d=retro", "openid": "cairo.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 1974262, "bug_id": 1934125, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-04-06 15:33:43", "update_id": 293789, "user_id": 5615, "id": 1974262, "testcase_feedback": [], "user": {"name": "ersen", "email": "oguz@ersen.moe", "id": 5615, "avatar": "https://seccdn.libravatar.org/avatar/b7a62226e7d88529ca69787274bacac45092c0f9bc56e521090d83f859529ce4?s=24&d=retro", "openid": "ersen.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "l10n"}, {"name": "fedora-join"}, {"name": "ask-fedora"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1952457, "bug_id": 1934125, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-23 21:21:43", "update_id": 293780, "user_id": 4120, "id": 1952457, "testcase_feedback": [], "user": {"name": "atim", "email": "ego.cordatus@gmail.com", "id": 4120, "avatar": "https://seccdn.libravatar.org/avatar/8c3a317a13d88ca7421098b94cce0501c97ca2283e7139c4992df34f6218fb3b?s=24&d=retro", "openid": "atim.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "rust-sig"}]}}}, {"karma": 0, "comment_id": 1954028, "bug_id": 1934125, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2021-03-24 16:58:58", "update_id": 293779, "user_id": 2680, "id": 1954028, "testcase_feedback": [], "user": {"name": "thunderbirdtr", "email": "thunderbirdtr@gmail.com", "id": 2680, "avatar": "https://seccdn.libravatar.org/avatar/f8901e39b4af28d3baa96e3d3bccaea55053b809563cfed318e9e404e9cac4a8?s=24&d=retro", "openid": "thunderbirdtr.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "kde-sig"}, {"name": "videos"}, {"name": "designteam"}, {"name": "advocates"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "signed_fpca"}, {"name": "websites-apps"}, {"name": "fedora-contributor"}, {"name": "ipausers"}, {"name": "ambassadors"}, {"name": "altvideos"}, {"name": "fedorabugs"}, {"name": "mindshare"}, {"name": "asahi-sig"}, {"name": "discussion-mods-asahi"}, {"name": "ai-ml-sig"}, {"name": "pytorch-sig"}, {"name": "websites-apps-admin"}, {"name": "gitlab-fedora-aiml-developer"}]}}}, {"karma": 1, "comment_id": 1951565, "bug_id": 1934125, "comment": {"karma": 1, "karma_critpath": 0, "text": "Thanks you, Panu Matilainen!", "timestamp": "2021-03-23 13:46:49", "update_id": 293780, "user_id": 5985, "id": 1951565, "testcase_feedback": [], "user": {"name": "demiobenour", "email": "demiobenour@gmail.com", "id": 5985, "avatar": "https://seccdn.libravatar.org/avatar/1ede36dfb8f0ca6f45c38c274d56c75fd9f3276463cc32af2f51110fe2149a4c?s=24&d=retro", "openid": "demiobenour.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 1951723, "bug_id": 1934125, "comment": {"karma": 1, "karma_critpath": 0, "text": "Don't have handy tests for the CVEs, but the build is generally functional.", "timestamp": "2021-03-23 14:58:42", "update_id": 293780, "user_id": 2122, "id": 1951723, "testcase_feedback": [], "user": {"name": "bcotton", "email": "bcotton@funnelfiasco.com", "id": 2122, "avatar": "https://seccdn.libravatar.org/avatar/37e35e1343fe4a1eeaaedaca8917e05c6dfbfff08cfa8e906c2b21a1a280f274?s=24&d=retro", "openid": "bcotton.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "communishift"}, {"name": "wikiedit"}, {"name": "gitfedora-web"}, {"name": "advocates"}, {"name": "program-management"}]}}}, {"karma": 0, "comment_id": 1951737, "bug_id": 1934125, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-23 15:07:19", "update_id": 293780, "user_id": 5615, "id": 1951737, "testcase_feedback": [], "user": {"name": "ersen", "email": "oguz@ersen.moe", "id": 5615, "avatar": "https://seccdn.libravatar.org/avatar/b7a62226e7d88529ca69787274bacac45092c0f9bc56e521090d83f859529ce4?s=24&d=retro", "openid": "ersen.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "l10n"}, {"name": "fedora-join"}, {"name": "ask-fedora"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1960102, "bug_id": 1934125, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-28 17:28:22", "update_id": 293779, "user_id": 5881, "id": 1960102, "testcase_feedback": [], "user": {"name": "geraldosimiao", "email": "geraldo.simiao.kutz@gmail.com", "id": 5881, "avatar": "https://seccdn.libravatar.org/avatar/03fa5b58e8ac78544bf41ad8ecf9ee1920f2ebedb86542c2f4cdf7ef15813168?s=24&d=retro", "openid": "geraldosimiao.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "fedora-br"}, {"name": "advocates"}, {"name": "respins-sig"}]}}}]}, {"bug_id": 1938022, "title": "CVE-2021-20266 rpm: missing length checks in hdrblobInit() [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 1957868, "bug_id": 1938022, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-26 19:51:20", "update_id": 293779, "user_id": 284, "id": 1957868, "testcase_feedback": [], "user": {"name": "cairo", "email": "hansmueller183@yahoo.com", "id": 284, "avatar": "https://seccdn.libravatar.org/avatar/65ac01c684e76450d8575348b4894728e9c69ffdbd7c08718a4156e8e0daf5b6?s=24&d=retro", "openid": "cairo.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 1974262, "bug_id": 1938022, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-04-06 15:33:43", "update_id": 293789, "user_id": 5615, "id": 1974262, "testcase_feedback": [], "user": {"name": "ersen", "email": "oguz@ersen.moe", "id": 5615, "avatar": "https://seccdn.libravatar.org/avatar/b7a62226e7d88529ca69787274bacac45092c0f9bc56e521090d83f859529ce4?s=24&d=retro", "openid": "ersen.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "l10n"}, {"name": "fedora-join"}, {"name": "ask-fedora"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1952457, "bug_id": 1938022, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-23 21:21:43", "update_id": 293780, "user_id": 4120, "id": 1952457, "testcase_feedback": [], "user": {"name": "atim", "email": "ego.cordatus@gmail.com", "id": 4120, "avatar": "https://seccdn.libravatar.org/avatar/8c3a317a13d88ca7421098b94cce0501c97ca2283e7139c4992df34f6218fb3b?s=24&d=retro", "openid": "atim.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "rust-sig"}]}}}, {"karma": 0, "comment_id": 1954028, "bug_id": 1938022, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2021-03-24 16:58:58", "update_id": 293779, "user_id": 2680, "id": 1954028, "testcase_feedback": [], "user": {"name": "thunderbirdtr", "email": "thunderbirdtr@gmail.com", "id": 2680, "avatar": "https://seccdn.libravatar.org/avatar/f8901e39b4af28d3baa96e3d3bccaea55053b809563cfed318e9e404e9cac4a8?s=24&d=retro", "openid": "thunderbirdtr.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "kde-sig"}, {"name": "videos"}, {"name": "designteam"}, {"name": "advocates"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "signed_fpca"}, {"name": "websites-apps"}, {"name": "fedora-contributor"}, {"name": "ipausers"}, {"name": "ambassadors"}, {"name": "altvideos"}, {"name": "fedorabugs"}, {"name": "mindshare"}, {"name": "asahi-sig"}, {"name": "discussion-mods-asahi"}, {"name": "ai-ml-sig"}, {"name": "pytorch-sig"}, {"name": "websites-apps-admin"}, {"name": "gitlab-fedora-aiml-developer"}]}}}, {"karma": 1, "comment_id": 1951565, "bug_id": 1938022, "comment": {"karma": 1, "karma_critpath": 0, "text": "Thanks you, Panu Matilainen!", "timestamp": "2021-03-23 13:46:49", "update_id": 293780, "user_id": 5985, "id": 1951565, "testcase_feedback": [], "user": {"name": "demiobenour", "email": "demiobenour@gmail.com", "id": 5985, "avatar": "https://seccdn.libravatar.org/avatar/1ede36dfb8f0ca6f45c38c274d56c75fd9f3276463cc32af2f51110fe2149a4c?s=24&d=retro", "openid": "demiobenour.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 1951723, "bug_id": 1938022, "comment": {"karma": 1, "karma_critpath": 0, "text": "Don't have handy tests for the CVEs, but the build is generally functional.", "timestamp": "2021-03-23 14:58:42", "update_id": 293780, "user_id": 2122, "id": 1951723, "testcase_feedback": [], "user": {"name": "bcotton", "email": "bcotton@funnelfiasco.com", "id": 2122, "avatar": "https://seccdn.libravatar.org/avatar/37e35e1343fe4a1eeaaedaca8917e05c6dfbfff08cfa8e906c2b21a1a280f274?s=24&d=retro", "openid": "bcotton.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "communishift"}, {"name": "wikiedit"}, {"name": "gitfedora-web"}, {"name": "advocates"}, {"name": "program-management"}]}}}, {"karma": 0, "comment_id": 1951737, "bug_id": 1938022, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-23 15:07:19", "update_id": 293780, "user_id": 5615, "id": 1951737, "testcase_feedback": [], "user": {"name": "ersen", "email": "oguz@ersen.moe", "id": 5615, "avatar": "https://seccdn.libravatar.org/avatar/b7a62226e7d88529ca69787274bacac45092c0f9bc56e521090d83f859529ce4?s=24&d=retro", "openid": "ersen.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "l10n"}, {"name": "fedora-join"}, {"name": "ask-fedora"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1960102, "bug_id": 1938022, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-28 17:28:22", "update_id": 293779, "user_id": 5881, "id": 1960102, "testcase_feedback": [], "user": {"name": "geraldosimiao", "email": "geraldo.simiao.kutz@gmail.com", "id": 5881, "avatar": "https://seccdn.libravatar.org/avatar/03fa5b58e8ac78544bf41ad8ecf9ee1920f2ebedb86542c2f4cdf7ef15813168?s=24&d=retro", "openid": "geraldosimiao.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "fedora-br"}, {"name": "advocates"}, {"name": "respins-sig"}]}}}]}, {"bug_id": 1938024, "title": "CVE-2021-3421 rpm: unsigned signature header leads to string injection into an rpm database [fedora-32]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 1974262, "bug_id": 1938024, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-04-06 15:33:43", "update_id": 293789, "user_id": 5615, "id": 1974262, "testcase_feedback": [], "user": {"name": "ersen", "email": "oguz@ersen.moe", "id": 5615, "avatar": "https://seccdn.libravatar.org/avatar/b7a62226e7d88529ca69787274bacac45092c0f9bc56e521090d83f859529ce4?s=24&d=retro", "openid": "ersen.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "l10n"}, {"name": "fedora-join"}, {"name": "ask-fedora"}, {"name": "trust admins"}]}}}]}, {"bug_id": 1938027, "title": "CVE-2021-20271 rpm: Signature checks bypass via corrupted rpm package [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 1957868, "bug_id": 1938027, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-26 19:51:20", "update_id": 293779, "user_id": 284, "id": 1957868, "testcase_feedback": [], "user": {"name": "cairo", "email": "hansmueller183@yahoo.com", "id": 284, "avatar": "https://seccdn.libravatar.org/avatar/65ac01c684e76450d8575348b4894728e9c69ffdbd7c08718a4156e8e0daf5b6?s=24&d=retro", "openid": "cairo.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 1974262, "bug_id": 1938027, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-04-06 15:33:43", "update_id": 293789, "user_id": 5615, "id": 1974262, "testcase_feedback": [], "user": {"name": "ersen", "email": "oguz@ersen.moe", "id": 5615, "avatar": "https://seccdn.libravatar.org/avatar/b7a62226e7d88529ca69787274bacac45092c0f9bc56e521090d83f859529ce4?s=24&d=retro", "openid": "ersen.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "l10n"}, {"name": "fedora-join"}, {"name": "ask-fedora"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1952457, "bug_id": 1938027, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-23 21:21:43", "update_id": 293780, "user_id": 4120, "id": 1952457, "testcase_feedback": [], "user": {"name": "atim", "email": "ego.cordatus@gmail.com", "id": 4120, "avatar": "https://seccdn.libravatar.org/avatar/8c3a317a13d88ca7421098b94cce0501c97ca2283e7139c4992df34f6218fb3b?s=24&d=retro", "openid": "atim.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "rust-sig"}]}}}, {"karma": 0, "comment_id": 1954028, "bug_id": 1938027, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2021-03-24 16:58:58", "update_id": 293779, "user_id": 2680, "id": 1954028, "testcase_feedback": [], "user": {"name": "thunderbirdtr", "email": "thunderbirdtr@gmail.com", "id": 2680, "avatar": "https://seccdn.libravatar.org/avatar/f8901e39b4af28d3baa96e3d3bccaea55053b809563cfed318e9e404e9cac4a8?s=24&d=retro", "openid": "thunderbirdtr.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "kde-sig"}, {"name": "videos"}, {"name": "designteam"}, {"name": "advocates"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "signed_fpca"}, {"name": "websites-apps"}, {"name": "fedora-contributor"}, {"name": "ipausers"}, {"name": "ambassadors"}, {"name": "altvideos"}, {"name": "fedorabugs"}, {"name": "mindshare"}, {"name": "asahi-sig"}, {"name": "discussion-mods-asahi"}, {"name": "ai-ml-sig"}, {"name": "pytorch-sig"}, {"name": "websites-apps-admin"}, {"name": "gitlab-fedora-aiml-developer"}]}}}, {"karma": 1, "comment_id": 1951565, "bug_id": 1938027, "comment": {"karma": 1, "karma_critpath": 0, "text": "Thanks you, Panu Matilainen!", "timestamp": "2021-03-23 13:46:49", "update_id": 293780, "user_id": 5985, "id": 1951565, "testcase_feedback": [], "user": {"name": "demiobenour", "email": "demiobenour@gmail.com", "id": 5985, "avatar": "https://seccdn.libravatar.org/avatar/1ede36dfb8f0ca6f45c38c274d56c75fd9f3276463cc32af2f51110fe2149a4c?s=24&d=retro", "openid": "demiobenour.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 1951723, "bug_id": 1938027, "comment": {"karma": 1, "karma_critpath": 0, "text": "Don't have handy tests for the CVEs, but the build is generally functional.", "timestamp": "2021-03-23 14:58:42", "update_id": 293780, "user_id": 2122, "id": 1951723, "testcase_feedback": [], "user": {"name": "bcotton", "email": "bcotton@funnelfiasco.com", "id": 2122, "avatar": "https://seccdn.libravatar.org/avatar/37e35e1343fe4a1eeaaedaca8917e05c6dfbfff08cfa8e906c2b21a1a280f274?s=24&d=retro", "openid": "bcotton.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "communishift"}, {"name": "wikiedit"}, {"name": "gitfedora-web"}, {"name": "advocates"}, {"name": "program-management"}]}}}, {"karma": 0, "comment_id": 1951737, "bug_id": 1938027, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-23 15:07:19", "update_id": 293780, "user_id": 5615, "id": 1951737, "testcase_feedback": [], "user": {"name": "ersen", "email": "oguz@ersen.moe", "id": 5615, "avatar": "https://seccdn.libravatar.org/avatar/b7a62226e7d88529ca69787274bacac45092c0f9bc56e521090d83f859529ce4?s=24&d=retro", "openid": "ersen.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "l10n"}, {"name": "fedora-join"}, {"name": "ask-fedora"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1960102, "bug_id": 1938027, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-03-28 17:28:22", "update_id": 293779, "user_id": 5881, "id": 1960102, "testcase_feedback": [], "user": {"name": "geraldosimiao", "email": "geraldo.simiao.kutz@gmail.com", "id": 5881, "avatar": "https://seccdn.libravatar.org/avatar/03fa5b58e8ac78544bf41ad8ecf9ee1920f2ebedb86542c2f4cdf7ef15813168?s=24&d=retro", "openid": "geraldosimiao.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "fedora-br"}, {"name": "advocates"}, {"name": "respins-sig"}]}}}]}], "updateid": "FEDORA-2021-662680e477", "karma": 1, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}