| opendevreview | Jeremy Stanley proposed openstack/ossa master: Add OSSA-2024-001 (CVE-2024-32498) https://review.opendev.org/c/openstack/ossa/+/923301 | 14:37 |
|---|---|---|
| fungi | JayF: tonyb: rosmaita: d34dh0r53: prometheanfire: ^ please review asap | 14:39 |
| rosmaita | ack | 14:39 |
| fungi | i see a minor cosmetic thing we need to fix in our sphinx extension | 14:42 |
| fungi | looks like it should special-case situations where the reporter has no associated affiliation rather than substituting "none" | 14:43 |
| fungi | i'll tweak the wording in the credits list when i stuff the rst into e-mails for now | 14:44 |
| fungi | just to note, i've got the rst from that change prepped to go out to mailing lists in ~2.5 minutes | 14:57 |
| rosmaita | reviewed, LGTM | 14:57 |
| fungi | thanks! | 14:58 |
| fungi | think we'll have to go with a single reviewer given the time constraints, but that's not unusual | 14:58 |
| fungi | i went ahead and self-approved it | 14:59 |
| fungi | okay, mailing lists posts have gone out (openstack-announce, openstack-discuss, oss-security) | 15:01 |
| d34dh0r53 | Sorry, was running a meeting, I gave my posthumous +2 | 15:08 |
| fungi | no prob, nb4 merge ;) | 15:09 |
| fungi | thanks! | 15:09 |
| priteau | Gate job still queued? | 15:10 |
| fungi | yeah, looks like it's taking a few minutes to get a node assignment | 15:10 |
| fungi | if you need to refer to the advisory in the short term you can use the o-a ml archive link | 15:11 |
| fungi | https://lists.openstack.org/archives/list/openstack-announce@lists.openstack.org/message/AT6TIHJU3SKPYKCOED54XML2SF6HABRA/ | 15:12 |
| fungi | long term it'll be https://security.openstack.org/ossa/OSSA-2024-001.html | 15:12 |
| fungi | but that's a 404 until the gate and promote jobs run and (afs site publication pulse) | 15:13 |
| fungi | i think we're a bit starved for zuul capacity because of the ~50 changes that had to be pushed associated with this advisory | 15:14 |
| fungi | https://grafana.opendev.org/d/21a6e53ea4/zuul-status shows we're using around 700 nodes and have a 1k node request backlog | 15:15 |
| opendevreview | Merged openstack/ossa master: Add OSSA-2024-001 (CVE-2024-32498) https://review.opendev.org/c/openstack/ossa/+/923301 | 16:05 |
| fungi | nearly there | 16:05 |
| fungi | https://security.openstack.org/ossa/OSSA-2024-001.html is live now | 16:12 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!