*** mgoddard- is now known as mgoddard | 08:40 | |
fungi | gagehugo: i suppose we need to decide whether we're issuing an ossa for any of the problems fixed in https://launchpad.net/bugs/1688137 a month ago | 13:28 |
---|---|---|
fungi | since you've got backports merged as far back as stable/train for it | 13:29 |
fungi | gagehugo: also if you get a moment, https://review.opendev.org/799282 is a trivial bugfix for one of the documents on the security.o.o site | 13:50 |
fungi | gagehugo: and you might have some opinion on whether https://launchpad.net/bugs/1784259 should be considered fixed at this point, and whether it's worth issuing an advisory about. i'm leaning toward thinking these transitional states with rbac implementation don't rise to the level of an advisory | 14:16 |
fungi | we should probably also decide whether we're issuing an advisory for https://launchpad.net/bugs/1927677 or treating it as hardening | 14:24 |
opendevreview | Merged openstack/ossa master: Correct is_safe_path example in guidelines https://review.opendev.org/c/openstack/ossa/+/799282 | 14:45 |
fungi | thanks! | 15:02 |
gagehugo | I don't think the rbac work needs an advisory | 16:46 |
fungi | gagehugo: so bugs 1784259 and 1933269 we can wontfix for ossa? | 17:01 |
gagehugo | 1784259 as wont fix imo | 17:03 |
gagehugo | 1933269 yeah same, it's rbac work | 17:14 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!