{"update": {"autokarma": false, "autotime": false, "stable_karma": 3, "stable_days": 7, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "- crun and runc both `Provides: oci-runtime`.\n- containers-common now has `Requires: oci-runtime`.\n- `dnf install oci-runtime` will install crun by default unless runc is already installed.\n\n----\n\nbuildah: Security fix for CVE-2021-20291\nAutobuilt v1.20.1\n\n\n\n\n\n\n", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2021-04-19 14:15:37", "date_modified": "2021-04-22 14:21:23", "date_approved": null, "date_testing": "2021-04-22 15:16:51", "date_stable": "2021-04-24 18:04:51", "alias": "FEDORA-2021-ec00da7faa", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2021-04-24 18:04:51", "meets_testing_requirements": true, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2021-ec00da7faa", "title": "buildah-1.20.1-4.fc33 containers-common-1-15.fc33 crun-0.19.1-2.fc33 podman-3.1.2-1.fc33 runc-1.0.0-377.rc93.fc33", "version_hash": "e795b3c8d7277d59d3cb6344f3e974908c40cdb1", "release": {"name": "F33", "long_name": "Fedora 33", "version": "33", "id_prefix": "FEDORA", "branch": "f33", "dist_tag": "f33", "stable_tag": "f33-updates", "testing_tag": "f33-updates-testing", "candidate_tag": "f33-updates-candidate", "pending_signing_tag": "f33-signing-pending", "pending_testing_tag": "f33-updates-testing-pending", "pending_stable_tag": "f33-updates-pending", "override_tag": "f33-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "lsm5", "email": "lsm5@redhat.com", "id": 228, "avatar": "https://seccdn.libravatar.org/avatar/05bd0d0810e225c716eba3290a5596c557d1ea3e4e2b0cf0de8e62a925927b5c?s=24&d=retro", "openid": "lsm5.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "container-sig"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by lsm5. ", "timestamp": "2021-04-19 14:15:37", "update_id": 300046, "user_id": 91, "id": 1991331, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2021-04-19 14:15:38", "update_id": 300046, "user_id": 91, "id": 1991332, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2021-04-19 14:15:38", "update_id": 300046, "user_id": 91, "id": 1991333, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "lsm5 edited this update.\n\nNew build(s):\n\n- podman-3.1.1-2.fc33\n\nKarma has been reset.", "timestamp": "2021-04-19 14:37:53", "update_id": 300046, "user_id": 91, "id": 1991389, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2021-04-19 14:37:54", "update_id": 300046, "user_id": 91, "id": 1991390, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2021-04-19 18:34:00", "update_id": 300046, "user_id": 91, "id": 1992250, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2021-04-19 19:12:14", "update_id": 300046, "user_id": 91, "id": 1992298, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2021-04-19 19:12:17", "update_id": 300046, "user_id": 91, "id": 1992299, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "lsm5 edited this update.\n\nNew build(s):\n\n- buildah-1.20.1-3.fc33\n\nKarma has been reset.", "timestamp": "2021-04-19 23:35:42", "update_id": 300046, "user_id": 91, "id": 1992523, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by lsm5. ", "timestamp": "2021-04-19 23:35:44", "update_id": 300046, "user_id": 91, "id": 1992524, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2021-04-19 23:35:45", "update_id": 300046, "user_id": 91, "id": 1992525, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [buildah-1.20.1-2.fc33](https://bodhi.fedoraproject.org/updates/FEDORA-2021-175c5659de), and has inherited its bugs and notes.", "timestamp": "2021-04-19 23:35:46", "update_id": 300046, "user_id": 91, "id": 1992527, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "lsm5 edited this update.", "timestamp": "2021-04-19 23:37:23", "update_id": 300046, "user_id": 91, "id": 1992528, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "lsm5 edited this update.\n\nNew build(s):\n\n- containers-common-1-15.fc33\n\nRemoved build(s):\n\n- containers-common-1-11.fc33\n\nKarma has been reset.", "timestamp": "2021-04-20 00:35:02", "update_id": 300046, "user_id": 91, "id": 1992571, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2021-04-20 15:37:41", "update_id": 300046, "user_id": 91, "id": 1993567, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "lsm5 edited this update.\n\nNew build(s):\n\n- runc-1.0.0-377.rc93.fc33\n\nRemoved build(s):\n\n- runc-1.0.0-376.dev.git12644e6.fc33\n\nKarma has been reset.", "timestamp": "2021-04-21 20:22:57", "update_id": 300046, "user_id": 91, "id": 1995455, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by lsm5. ", "timestamp": "2021-04-21 20:23:00", "update_id": 300046, "user_id": 91, "id": 1995456, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2021-04-21 22:02:20", "update_id": 300046, "user_id": 91, "id": 1995637, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "lsm5 edited this update.\n\nNew build(s):\n\n- buildah-1.20.1-4.fc33\n\nRemoved build(s):\n\n- buildah-1.20.1-3.fc33\n\nKarma has been reset.", "timestamp": "2021-04-22 13:02:52", "update_id": 300046, "user_id": 91, "id": 1996184, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by lsm5. ", "timestamp": "2021-04-22 13:02:53", "update_id": 300046, "user_id": 91, "id": 1996185, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "lsm5 edited this update.\n\nNew build(s):\n\n- podman-3.1.2-1.fc33\n\nRemoved build(s):\n\n- podman-3.1.1-2.fc33\n\nKarma has been reset.", "timestamp": "2021-04-22 13:41:17", "update_id": 300046, "user_id": 91, "id": 1996262, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "lsm5 edited this update.\n\nNew build(s):\n\n- crun-0.19.1-2.fc33\n\nRemoved build(s):\n\n- crun-0.19-2.fc33\n\nKarma has been reset.", "timestamp": "2021-04-22 14:21:23", "update_id": 300046, "user_id": 91, "id": 1996346, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2021-04-22 15:17:12", "update_id": 300046, "user_id": 91, "id": 1996456, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2021-04-22 17:35:03", "update_id": 300046, "user_id": 91, "id": 1996616, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2021-04-22 17:35:03", "update_id": 300046, "user_id": 91, "id": 1996617, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "LGTM. A few test flakes, all of them related to `apk`. Probably a server outage somewhere.", "timestamp": "2021-04-22 20:03:34", "update_id": 300046, "user_id": 3407, "id": 1996819, "bug_feedback": [{"karma": 0, "comment_id": 1996819, "bug_id": 1939485, "bug": {"bug_id": 1939485, "title": "CVE-2021-20291 containers/storage: DoS via malicious image", "security": true, "parent": true}}, {"karma": 0, "comment_id": 1996819, "bug_id": 1947288, "bug": {"bug_id": 1947288, "title": "CVE-2021-20291 buildah: containers/storage: DoS via malicious image [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "santiago", "email": "santiago@redhat.com", "id": 3407, "avatar": "https://seccdn.libravatar.org/avatar/ea76e06d92bea441997ae5b01983859fcee775de243c13c2efb1731b6f444328?s=24&d=retro", "openid": "santiago.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "container-sig"}, {"name": "gitrpmgrill"}, {"name": "trust admins"}]}}, {"karma": -1, "karma_critpath": 0, "text": "I'm having the same issue with this podman version like I have with every  3.1.* version: Rootless podman doesn't work at all anymore:\n\nA simple command, like `podman ps` doesn't work - it uses plenty of CPU resources indefinitely and doesn't return a result :(\n\n`sudo podman ps` works fine. There's no container running on the system.\n\nAfter downgrading `podman` and `podman-plugins` back to 3.0.1 it works fine again.", "timestamp": "2021-04-23 09:32:18", "update_id": 300046, "user_id": 6356, "id": 1997201, "bug_feedback": [{"karma": 0, "comment_id": 1997201, "bug_id": 1939485, "bug": {"bug_id": 1939485, "title": "CVE-2021-20291 containers/storage: DoS via malicious image", "security": true, "parent": true}}, {"karma": 0, "comment_id": 1997201, "bug_id": 1947288, "bug": {"bug_id": 1947288, "title": "CVE-2021-20291 buildah: containers/storage: DoS via malicious image [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "faultline", "email": "christian.t.solomon@protonmail.com", "id": 6356, "avatar": "https://seccdn.libravatar.org/avatar/4e5ff62a0b1f11da67fb22e6be3afe723e52820afe57b0547d917c64c2e348e6?s=24&d=retro", "openid": "faultline.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.", "timestamp": "2021-04-23 09:32:18", "update_id": 300046, "user_id": 91, "id": 1997202, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "They are all working for me.", "timestamp": "2021-04-23 10:04:40", "update_id": 300046, "user_id": 1643, "id": 1997247, "bug_feedback": [{"karma": 0, "comment_id": 1997247, "bug_id": 1939485, "bug": {"bug_id": 1939485, "title": "CVE-2021-20291 containers/storage: DoS via malicious image", "security": true, "parent": true}}, {"karma": 0, "comment_id": 1997247, "bug_id": 1947288, "bug": {"bug_id": 1947288, "title": "CVE-2021-20291 buildah: containers/storage: DoS via malicious image [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "dwalsh", "email": "dwalsh@redhat.com", "id": 1643, "avatar": "https://seccdn.libravatar.org/avatar/1c5e583ab8b950eb480915ed4b094dd68fe4e57e7f46a031473ae383bf4d5495?s=24&d=retro", "openid": "dwalsh.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "summer-coding"}, {"name": "container-sig"}, {"name": "cla_redhat"}, {"name": "hgsetroubleshoot"}, {"name": "gitsetroubleshoot"}, {"name": "cvspolicycoreutils"}, {"name": "gitsystem-config-selinux"}, {"name": "gitselinux-policy"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Hit some podman integration test failures with these.  Mostly networking-related tests.  Running against, and investigating.", "timestamp": "2021-04-23 13:26:35", "update_id": 300046, "user_id": 4727, "id": 1997368, "bug_feedback": [{"karma": 0, "comment_id": 1997368, "bug_id": 1939485, "bug": {"bug_id": 1939485, "title": "CVE-2021-20291 containers/storage: DoS via malicious image", "security": true, "parent": true}}, {"karma": 0, "comment_id": 1997368, "bug_id": 1947288, "bug": {"bug_id": 1947288, "title": "CVE-2021-20291 buildah: containers/storage: DoS via malicious image [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "cevich", "email": "cevich@redhat.com", "id": 4727, "avatar": "https://seccdn.libravatar.org/avatar/8fb075bfec22aee1e2ae03437b2eec711d82de524bc1fb225303f9646150c9c1?s=24&d=retro", "openid": "cevich.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "cla_redhat"}]}}, {"karma": 1, "karma_critpath": 0, "text": "I was able to reproduce the same dnsname plugin failures on master w/o these package updates, therefore they must not be involved.", "timestamp": "2021-04-23 15:11:34", "update_id": 300046, "user_id": 4727, "id": 1997643, "bug_feedback": [{"karma": 0, "comment_id": 1997643, "bug_id": 1939485, "bug": {"bug_id": 1939485, "title": "CVE-2021-20291 containers/storage: DoS via malicious image", "security": true, "parent": true}}, {"karma": 0, "comment_id": 1997643, "bug_id": 1947288, "bug": {"bug_id": 1947288, "title": "CVE-2021-20291 buildah: containers/storage: DoS via malicious image [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [], "user": {"name": "cevich", "email": "cevich@redhat.com", "id": 4727, "avatar": "https://seccdn.libravatar.org/avatar/8fb075bfec22aee1e2ae03437b2eec711d82de524bc1fb225303f9646150c9c1?s=24&d=retro", "openid": "cevich.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2021-04-23 15:11:41", "update_id": 300046, "user_id": 91, "id": 1997646, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by lsm5. ", "timestamp": "2021-04-23 15:28:10", "update_id": 300046, "user_id": 91, "id": 1997678, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2021-04-24 18:06:31", "update_id": 300046, "user_id": 91, "id": 1998857, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "buildah-1.20.1-4.fc33", "signed": true, "release_id": 40, "type": "rpm", "epoch": 0}, {"nvr": "containers-common-1-15.fc33", "signed": true, "release_id": 40, "type": "rpm", "epoch": 4}, {"nvr": "crun-0.19.1-2.fc33", "signed": true, "release_id": 40, "type": "rpm", "epoch": 0}, {"nvr": "podman-3.1.2-1.fc33", "signed": true, "release_id": 40, "type": "rpm", "epoch": 2}, {"nvr": "runc-1.0.0-377.rc93.fc33", "signed": true, "release_id": 40, "type": "rpm", "epoch": 2}], "bugs": [{"bug_id": 1939485, "title": "CVE-2021-20291 containers/storage: DoS via malicious image", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 1987533, "bug_id": 1939485, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM. Passes all system tests once `nmap-ncat` is installed.", "timestamp": "2021-04-15 21:20:42", "update_id": 299134, "user_id": 3407, "id": 1987533, "testcase_feedback": [], "user": {"name": "santiago", "email": "santiago@redhat.com", "id": 3407, "avatar": "https://seccdn.libravatar.org/avatar/ea76e06d92bea441997ae5b01983859fcee775de243c13c2efb1731b6f444328?s=24&d=retro", "openid": "santiago.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "container-sig"}, {"name": "gitrpmgrill"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 1987586, "bug_id": 1939485, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM passes gating tests", "timestamp": "2021-04-15 21:38:10", "update_id": 299134, "user_id": 3753, "id": 1987586, "testcase_feedback": [], "user": {"name": "tomsweeneyredhat", "email": "tsweeney@redhat.com", "id": 3753, "avatar": "https://seccdn.libravatar.org/avatar/81515e3e34f17b21a781f8126bcb7fc6cf427102bab5b12e7ffe30ee1eef5a86?s=24&d=retro", "openid": "tomsweeneyredhat.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 1, "comment_id": 1988605, "bug_id": 1939485, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM, passed baseline tests", "timestamp": "2021-04-16 18:18:39", "update_id": 299131, "user_id": 3753, "id": 1988605, "testcase_feedback": [], "user": {"name": "tomsweeneyredhat", "email": "tsweeney@redhat.com", "id": 3753, "avatar": "https://seccdn.libravatar.org/avatar/81515e3e34f17b21a781f8126bcb7fc6cf427102bab5b12e7ffe30ee1eef5a86?s=24&d=retro", "openid": "tomsweeneyredhat.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 0, "comment_id": 1996819, "bug_id": 1939485, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM. A few test flakes, all of them related to `apk`. Probably a server outage somewhere.", "timestamp": "2021-04-22 20:03:34", "update_id": 300046, "user_id": 3407, "id": 1996819, "testcase_feedback": [], "user": {"name": "santiago", "email": "santiago@redhat.com", "id": 3407, "avatar": "https://seccdn.libravatar.org/avatar/ea76e06d92bea441997ae5b01983859fcee775de243c13c2efb1731b6f444328?s=24&d=retro", "openid": "santiago.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "container-sig"}, {"name": "gitrpmgrill"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1987734, "bug_id": 1939485, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-04-16 01:38:24", "update_id": 299131, "user_id": 5881, "id": 1987734, "testcase_feedback": [], "user": {"name": "geraldosimiao", "email": "geraldo.simiao.kutz@gmail.com", "id": 5881, "avatar": "https://seccdn.libravatar.org/avatar/03fa5b58e8ac78544bf41ad8ecf9ee1920f2ebedb86542c2f4cdf7ef15813168?s=24&d=retro", "openid": "geraldosimiao.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "fedora-br"}, {"name": "advocates"}, {"name": "respins-sig"}]}}}, {"karma": 0, "comment_id": 1997246, "bug_id": 1939485, "comment": {"karma": 1, "karma_critpath": 0, "text": "They are all working for me.", "timestamp": "2021-04-23 10:03:55", "update_id": 299589, "user_id": 1643, "id": 1997246, "testcase_feedback": [], "user": {"name": "dwalsh", "email": "dwalsh@redhat.com", "id": 1643, "avatar": "https://seccdn.libravatar.org/avatar/1c5e583ab8b950eb480915ed4b094dd68fe4e57e7f46a031473ae383bf4d5495?s=24&d=retro", "openid": "dwalsh.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "summer-coding"}, {"name": "container-sig"}, {"name": "cla_redhat"}, {"name": "hgsetroubleshoot"}, {"name": "gitsetroubleshoot"}, {"name": "cvspolicycoreutils"}, {"name": "gitsystem-config-selinux"}, {"name": "gitselinux-policy"}]}}}, {"karma": 0, "comment_id": 1997247, "bug_id": 1939485, "comment": {"karma": 1, "karma_critpath": 0, "text": "They are all working for me.", "timestamp": "2021-04-23 10:04:40", "update_id": 300046, "user_id": 1643, "id": 1997247, "testcase_feedback": [], "user": {"name": "dwalsh", "email": "dwalsh@redhat.com", "id": 1643, "avatar": "https://seccdn.libravatar.org/avatar/1c5e583ab8b950eb480915ed4b094dd68fe4e57e7f46a031473ae383bf4d5495?s=24&d=retro", "openid": "dwalsh.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "summer-coding"}, {"name": "container-sig"}, {"name": "cla_redhat"}, {"name": "hgsetroubleshoot"}, {"name": "gitsetroubleshoot"}, {"name": "cvspolicycoreutils"}, {"name": "gitsystem-config-selinux"}, {"name": "gitselinux-policy"}]}}}, {"karma": 0, "comment_id": 1997201, "bug_id": 1939485, "comment": {"karma": -1, "karma_critpath": 0, "text": "I'm having the same issue with this podman version like I have with every  3.1.* version: Rootless podman doesn't work at all anymore:\n\nA simple command, like `podman ps` doesn't work - it uses plenty of CPU resources indefinitely and doesn't return a result :(\n\n`sudo podman ps` works fine. There's no container running on the system.\n\nAfter downgrading `podman` and `podman-plugins` back to 3.0.1 it works fine again.", "timestamp": "2021-04-23 09:32:18", "update_id": 300046, "user_id": 6356, "id": 1997201, "testcase_feedback": [], "user": {"name": "faultline", "email": "christian.t.solomon@protonmail.com", "id": 6356, "avatar": "https://seccdn.libravatar.org/avatar/4e5ff62a0b1f11da67fb22e6be3afe723e52820afe57b0547d917c64c2e348e6?s=24&d=retro", "openid": "faultline.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1997366, "bug_id": 1939485, "comment": {"karma": 1, "karma_critpath": 0, "text": "Ran the podman integration tests after installing these.  Working fine.", "timestamp": "2021-04-23 13:25:29", "update_id": 299589, "user_id": 4727, "id": 1997366, "testcase_feedback": [], "user": {"name": "cevich", "email": "cevich@redhat.com", "id": 4727, "avatar": "https://seccdn.libravatar.org/avatar/8fb075bfec22aee1e2ae03437b2eec711d82de524bc1fb225303f9646150c9c1?s=24&d=retro", "openid": "cevich.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 1997368, "bug_id": 1939485, "comment": {"karma": 0, "karma_critpath": 0, "text": "Hit some podman integration test failures with these.  Mostly networking-related tests.  Running against, and investigating.", "timestamp": "2021-04-23 13:26:35", "update_id": 300046, "user_id": 4727, "id": 1997368, "testcase_feedback": [], "user": {"name": "cevich", "email": "cevich@redhat.com", "id": 4727, "avatar": "https://seccdn.libravatar.org/avatar/8fb075bfec22aee1e2ae03437b2eec711d82de524bc1fb225303f9646150c9c1?s=24&d=retro", "openid": "cevich.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 1997643, "bug_id": 1939485, "comment": {"karma": 1, "karma_critpath": 0, "text": "I was able to reproduce the same dnsname plugin failures on master w/o these package updates, therefore they must not be involved.", "timestamp": "2021-04-23 15:11:34", "update_id": 300046, "user_id": 4727, "id": 1997643, "testcase_feedback": [], "user": {"name": "cevich", "email": "cevich@redhat.com", "id": 4727, "avatar": "https://seccdn.libravatar.org/avatar/8fb075bfec22aee1e2ae03437b2eec711d82de524bc1fb225303f9646150c9c1?s=24&d=retro", "openid": "cevich.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "cla_redhat"}]}}}]}, {"bug_id": 1947288, "title": "CVE-2021-20291 buildah: containers/storage: DoS via malicious image [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 1987533, "bug_id": 1947288, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM. Passes all system tests once `nmap-ncat` is installed.", "timestamp": "2021-04-15 21:20:42", "update_id": 299134, "user_id": 3407, "id": 1987533, "testcase_feedback": [], "user": {"name": "santiago", "email": "santiago@redhat.com", "id": 3407, "avatar": "https://seccdn.libravatar.org/avatar/ea76e06d92bea441997ae5b01983859fcee775de243c13c2efb1731b6f444328?s=24&d=retro", "openid": "santiago.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "container-sig"}, {"name": "gitrpmgrill"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 1987586, "bug_id": 1947288, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM passes gating tests", "timestamp": "2021-04-15 21:38:10", "update_id": 299134, "user_id": 3753, "id": 1987586, "testcase_feedback": [], "user": {"name": "tomsweeneyredhat", "email": "tsweeney@redhat.com", "id": 3753, "avatar": "https://seccdn.libravatar.org/avatar/81515e3e34f17b21a781f8126bcb7fc6cf427102bab5b12e7ffe30ee1eef5a86?s=24&d=retro", "openid": "tomsweeneyredhat.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 1, "comment_id": 1988605, "bug_id": 1947288, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM, passed baseline tests", "timestamp": "2021-04-16 18:18:39", "update_id": 299131, "user_id": 3753, "id": 1988605, "testcase_feedback": [], "user": {"name": "tomsweeneyredhat", "email": "tsweeney@redhat.com", "id": 3753, "avatar": "https://seccdn.libravatar.org/avatar/81515e3e34f17b21a781f8126bcb7fc6cf427102bab5b12e7ffe30ee1eef5a86?s=24&d=retro", "openid": "tomsweeneyredhat.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 0, "comment_id": 1996819, "bug_id": 1947288, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM. A few test flakes, all of them related to `apk`. Probably a server outage somewhere.", "timestamp": "2021-04-22 20:03:34", "update_id": 300046, "user_id": 3407, "id": 1996819, "testcase_feedback": [], "user": {"name": "santiago", "email": "santiago@redhat.com", "id": 3407, "avatar": "https://seccdn.libravatar.org/avatar/ea76e06d92bea441997ae5b01983859fcee775de243c13c2efb1731b6f444328?s=24&d=retro", "openid": "santiago.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "container-sig"}, {"name": "gitrpmgrill"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1987734, "bug_id": 1947288, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-04-16 01:38:24", "update_id": 299131, "user_id": 5881, "id": 1987734, "testcase_feedback": [], "user": {"name": "geraldosimiao", "email": "geraldo.simiao.kutz@gmail.com", "id": 5881, "avatar": "https://seccdn.libravatar.org/avatar/03fa5b58e8ac78544bf41ad8ecf9ee1920f2ebedb86542c2f4cdf7ef15813168?s=24&d=retro", "openid": "geraldosimiao.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "fedora-br"}, {"name": "advocates"}, {"name": "respins-sig"}]}}}, {"karma": 0, "comment_id": 1997246, "bug_id": 1947288, "comment": {"karma": 1, "karma_critpath": 0, "text": "They are all working for me.", "timestamp": "2021-04-23 10:03:55", "update_id": 299589, "user_id": 1643, "id": 1997246, "testcase_feedback": [], "user": {"name": "dwalsh", "email": "dwalsh@redhat.com", "id": 1643, "avatar": "https://seccdn.libravatar.org/avatar/1c5e583ab8b950eb480915ed4b094dd68fe4e57e7f46a031473ae383bf4d5495?s=24&d=retro", "openid": "dwalsh.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "summer-coding"}, {"name": "container-sig"}, {"name": "cla_redhat"}, {"name": "hgsetroubleshoot"}, {"name": "gitsetroubleshoot"}, {"name": "cvspolicycoreutils"}, {"name": "gitsystem-config-selinux"}, {"name": "gitselinux-policy"}]}}}, {"karma": 0, "comment_id": 1997247, "bug_id": 1947288, "comment": {"karma": 1, "karma_critpath": 0, "text": "They are all working for me.", "timestamp": "2021-04-23 10:04:40", "update_id": 300046, "user_id": 1643, "id": 1997247, "testcase_feedback": [], "user": {"name": "dwalsh", "email": "dwalsh@redhat.com", "id": 1643, "avatar": "https://seccdn.libravatar.org/avatar/1c5e583ab8b950eb480915ed4b094dd68fe4e57e7f46a031473ae383bf4d5495?s=24&d=retro", "openid": "dwalsh.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "summer-coding"}, {"name": "container-sig"}, {"name": "cla_redhat"}, {"name": "hgsetroubleshoot"}, {"name": "gitsetroubleshoot"}, {"name": "cvspolicycoreutils"}, {"name": "gitsystem-config-selinux"}, {"name": "gitselinux-policy"}]}}}, {"karma": 0, "comment_id": 1997201, "bug_id": 1947288, "comment": {"karma": -1, "karma_critpath": 0, "text": "I'm having the same issue with this podman version like I have with every  3.1.* version: Rootless podman doesn't work at all anymore:\n\nA simple command, like `podman ps` doesn't work - it uses plenty of CPU resources indefinitely and doesn't return a result :(\n\n`sudo podman ps` works fine. There's no container running on the system.\n\nAfter downgrading `podman` and `podman-plugins` back to 3.0.1 it works fine again.", "timestamp": "2021-04-23 09:32:18", "update_id": 300046, "user_id": 6356, "id": 1997201, "testcase_feedback": [], "user": {"name": "faultline", "email": "christian.t.solomon@protonmail.com", "id": 6356, "avatar": "https://seccdn.libravatar.org/avatar/4e5ff62a0b1f11da67fb22e6be3afe723e52820afe57b0547d917c64c2e348e6?s=24&d=retro", "openid": "faultline.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1997366, "bug_id": 1947288, "comment": {"karma": 1, "karma_critpath": 0, "text": "Ran the podman integration tests after installing these.  Working fine.", "timestamp": "2021-04-23 13:25:29", "update_id": 299589, "user_id": 4727, "id": 1997366, "testcase_feedback": [], "user": {"name": "cevich", "email": "cevich@redhat.com", "id": 4727, "avatar": "https://seccdn.libravatar.org/avatar/8fb075bfec22aee1e2ae03437b2eec711d82de524bc1fb225303f9646150c9c1?s=24&d=retro", "openid": "cevich.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 1997368, "bug_id": 1947288, "comment": {"karma": 0, "karma_critpath": 0, "text": "Hit some podman integration test failures with these.  Mostly networking-related tests.  Running against, and investigating.", "timestamp": "2021-04-23 13:26:35", "update_id": 300046, "user_id": 4727, "id": 1997368, "testcase_feedback": [], "user": {"name": "cevich", "email": "cevich@redhat.com", "id": 4727, "avatar": "https://seccdn.libravatar.org/avatar/8fb075bfec22aee1e2ae03437b2eec711d82de524bc1fb225303f9646150c9c1?s=24&d=retro", "openid": "cevich.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 1997643, "bug_id": 1947288, "comment": {"karma": 1, "karma_critpath": 0, "text": "I was able to reproduce the same dnsname plugin failures on master w/o these package updates, therefore they must not be involved.", "timestamp": "2021-04-23 15:11:34", "update_id": 300046, "user_id": 4727, "id": 1997643, "testcase_feedback": [], "user": {"name": "cevich", "email": "cevich@redhat.com", "id": 4727, "avatar": "https://seccdn.libravatar.org/avatar/8fb075bfec22aee1e2ae03437b2eec711d82de524bc1fb225303f9646150c9c1?s=24&d=retro", "openid": "cevich.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "cla_redhat"}]}}}]}], "updateid": "FEDORA-2021-ec00da7faa", "karma": 2, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}